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Foreward 
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The 861-6,8 bombs will result from a factory rclrofil 
of the 861-0,2,and 5 bombs. This rclrofil is being conducted 
as part of the 86 rStockpilc Improvement Program (SIP). The 

goal of the 861 SIP is to upgrade B61s in stockpile by incor¬ 
porating modem design features of safety, use control, and 
improved operational flexibility. References 1-9 trace the 
stockpile reviews identifying the shortcomings of the stock¬ 
pile and the recommendations for a selective retirement/ 
retrofit program. Each of these references is reproduced in 
Appendix A of the 861 -7 Weapon Development Report'® and 
summarized in the foreward of thatdocument. Thcmcchani- 
cal and electrical design of the 861-6,8 is very similar to the 
861-7, an ongoing retrofit of the B61-1 scheduled to be 
completed in September 1990. 

The SIP does not follow the normal nuclear wcapton 
path of authorizations and approvals. No 01 through 03 


activiiias occur. The first authorization occurred with the 
release of the Nuclear Weapons Production and Planning 
Directive (P&PD) issued by the Director of Military Applica- 

uonsinMarch 1987schedulingtheproductionofthe 861-6 8 

ioof '‘ authorization was granted by DOE/AL Noveml^r 
. Since stockpile assets are required for the 861-6 8 
producuon, a Product Change Proposal was coordinatal 
through Field Command, DNA defining the effect of the 

retrofit. The PCP for the 861-6 was approved in April 1988 

At this lime, the DOE/DoD coordinated draft Military 
Characteristics for the 861 -6,8 await NWCSC approval. The 
Interim Design Review and Acceptance Group (DRAAG) is 
icniaiively scheduled for May 1989. 








f ^ 




8 












Summary 


The B6I-6.8 is a factory retrofit of the 661-0,2.5. 
utilizing an IHE nuclear primary and enhanced electrical 
safety components. Use control, command disable, and im¬ 
proved operational flexibility features arc also included. The 
B61-6,8 was designed to be compatible with all aircraft now 
approved for B61 carriage. Compatibility will only be 
demonstrated fortho.se Navy aircraft li.sted in the MCs: A-4. 

A-6, A-7, F/A-18. and A-12 (when available). No known 
problems exist. 

The B6l-6,8 will be fielded to be compatible with 
aircraft employing AMACs without Intent Unique Signal 
(lUQS) generators through the employment of the MC3025 
Signal Selector. The MC3025 will be removed from all 
bombs on or before 1 January, 2000. Only aircraft with lUQS- 
capable AMACs will be compatible after this time. 

Significant design features of the B6I -6.8 arc as fol¬ 
lows: 


Delivery Options'. 

Frcefall Airburst (FFA) 

Frccfall Groundburst (FFG) 

Retarded Airburst (REA) 

Retarded Groundburst, Laydown (REG) 

Aircraft Delivery Constraints: 

Cenified to maxim um aircraft capabilities 

__- I M‘'‘ 

Safety. 

Use of IHE for primary explosive 
Primary is inherently one-point safe 
Enhanced clcciricaJ safety to meet modem nuclear 
safely standards 


Use Control: 


Physical: 

Length 

Diameter 

Weight 

Yields: 


3597 mm (141.6 in.) 
338 mm (13.3 in.) 
350 kg (770 lb) 


Ui) 


Li mitjd Life Components: 
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Interim Development Report 
for the B61-6,8 Bombs 

1. B61-6,8 Overview 




Design Objective 

The B6I Stockpile Improvcmeni Program objective is 
to upgrade all B61 bombs to incorporate modem design 
features of safety, use control, and improved operational 
flexibility. 

Design Characteristics 

The B61 -6,8 will provide enhanced nuclear detonation 
safely and plutonium scatter safety in abnormal (accident) en¬ 
vironments by the use of: (I) exclusion region isolation of 
safety-critical electrical circuiis with colocatctl wcak-link and 
sironglink devices, (2) prearm and posi-rcicasc unique signal 
conu^I of strong links, and (3) insensitive high explosive 
(IHE). Use control is provided by Category D Permissive 
Action Link (PAL) and nonviolent command disable (CD) 


No field testing or maintenance is required other than at 
the time of limited life component exchange. F-icld inainte- 



T 


Exceptions/Limitations 

-None: ihc R fil-6.8 meets all MCs. The MC rcliabilU v 




‘O'> 


bC' 


assuming proper electrical and environmental inputs. Tcsls 
and analyses have been performed to evaluate the response of 
ihcbombio thcSlockpilc-lo-TargciScqucncc(STS)cnviron- 
menLs. 

The physical characteristics of the B61-6,8 arc: 


Weight 
Diameter 
Length 
CG location 


350 kg (770 lb) 

338 mm (13.3 in.) 

3597 mm (141.6 in.) 

1530 mm (60.25 in.) from nose 





10 
























2. Bomb Description 

General Boost System 

The B6l-6,8 is a major motlificaiion to the H6l-().2,5 
bombs in stockpile. Return of B6l -(),2,5s to the DOE 
production facility is required for the conversion to be per¬ 
formed. TorcduccproduciioncosLs,maximum reuseisinade 
of returned bomb'component.s. Tabic I indicates the major i 
parts from the returned, or “parent," wcafwn, and the new pro¬ 
duction parts that make up a B6I-6.8 bomb. “Girryovcr" 
design parts from the B6I-7 program currently in production 
weremsed when possible to save development and production 
costs. 



I 


i 

1 

! 


Nuclear System 


The nuclear system for the B6I-6.8 uses the “parent" ^ 
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Primary 
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MC4110 (B61 -6)/MC4111 (B61 -8) Center 
Bomb Subassembly 


The Center Bomb Subassembly consisLs of the nuclear 
system; the arming, fuzing, and firing system; and the center 
case section. 
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MC4118 Preflight Bomb Subassembly 

TlicMC4l l8consi.sisoflhcMC4136PrcfligluControl¬ 
ler and the MCI951 Rocket Motor.'^ The prcfliglit ease 
section hasa variable cross .section wiili amaximum thickness 
of 0.75-in. (I9.05 mm) 7075-T73511 aluminum cylinder and 
joins the center and tail ease sections. The aft suspension lug 
bolls to the top of the prcflight ease .section while the forward 
lug is secured to the center ease section. Preflight ease 
sections will be rcu.scd for the Mod 6 and 8 bomb after 
machining to enlarge the preflight controller access door 
opening. 

The reused MC195I Rocket Motor is bolted to the 
preflighl ease; its function is to spin the weapon to provide 
aerodynamic stabilization during frccfall deliveries. Since 


the MC1951 is no longer in production, rebuild of NMFTand 
SFT units will use the MC3003 (Figure4). Functionally and 
mechanically, the MC3(X)3 is identical to the MCI951 except 
the ignitor in the MC3003 is a one-ampere no-fire, one-ohm 
device, whereas the MCI951 contains a 100 mtHiampercno- 
fire, 4.5 ohm ignitor. Theelectrical system is designed to fire 
either device. 

The MC4136 Prcfl ight Controller is also secured to the 
prcflightcase. Access to the prcflight control panel is through 
a door in the case; this door is provided with dust and EMR 
seals. Several cables terminate in or pass through the preflight 
secuon interconnecting the ICU and prcflight controller with 
components in the preflight and tail sections. 



NOZ7LE SUBASSEMBLY 

GRAIN INHIBITOR 

PHOPEtLENT GRAIN 
AMMONIUM PERCHLORATE 
POLVSULFIDE PREPOLYMER 

rt TRANITROCARBAZOLE- 

BRIDGE WIRE 

BRIDGE CONTINUITY LOOP 

MOUNTING FLANGE- 

INITIATOR SUBASSEMBLY 

IGNITER SUBASSEMBLY 


MC 3003 SPIN ROCKET MOTOR 


IGNITER CLOSURE DISK 


PLUG 


CLOSURE DISK 


NOZZLE INSERT 


NOZZLE PAD 


BORON/POTASSIUM NITRATE 


BORdN CALCIUM CHROMATE 


Figure 4 MC.1(X)3 Rocket Motor 


























MC4119 Tail Bomb Subassembly 

This subassembly includes die lx)mb retardation sys¬ 
tem, the MC3624 Filter Pack'^ and the MC2213 Actuator and 
Pulse Battery Assembly. These componenLs arc mounted 
within a light aluminum case to which four Tins arc Ixtitcd. 
The remrdation system, which includes the MCI887A Ptira- 
chute'^and its deployment hardware, the ease section, and the 
fins are reused from the parent bomb. The MCI887A Para- 
chuieconsistsof a 17-ft'diamctcr ribbon-type parachute packed 
around a set of telescoping aluminum tubes, a suspension lino 
load ring, a deployment plate, and a set of deployment tube 
brakes. The parachute is deployed by firing the MC1835 Gas 
Generator'* (Figure 5) into the volume enclosed by the tele¬ 
scoping tubes. Line stretch is obtained in approximately 
0.165 seconds. For rebuild of NMFT and SFT units, the B61 - 
6.8 will use the MC3002 Gas Generator. The diffemcc 
between the MC3(X)2 and MC 1835 is the energy requirements 
of the ignitor. Like the MC3003 spin rocket motor, the 
MC3(X)2 employs a one-ohm, one ampere no-fire ignitor 

ratltcr than thc4.5 ohm,—580 milliampcre all-fire device u.scd 
in the MCI835. 

The filter pack and the actuator and pulse battery assem¬ 
bly arc bolted to the top-insidcof the tail ease. The filter pack's 
umbilical connector and the actuator and pulse battery 
assembly’s pullout rod extend through holes in the tail ca.se for 
aircraft interface connections. 



B61-6,8 Mass Properties 

At this time, estimates for the B61 - 6,8 weight, CG.and 
moments of inertia arc based on comparisons with previous 

B 61 mods. Tlic components causing the largest deviations 

from the B61 -7 will be the Acorn as.sembly, MC4137TSSG 

and the JTA(halla.slforWR). When thcfidclity of the test unit 

warrants, we will adjust these estimates as necessary during 
the development program. Final vcnfication of ma.ss proper¬ 
ties will be obtained on die first fe w B61 -6 bombs at the DOE 
production plant. The table below presents the best available 
data with comparisons to the B61 stockpile. 


Table!. B61 Mass Properties 
R61-P.1,2.5 B61-3.4 061-6 B61-8 

CG,in 60.265±.25 61.2±.5 60.26 60.16 

VVt.lb 7l6tl0 751±15 768 770 

‘Moments of inertia arc in Ibm-m" units. 


1‘i^uro 5. MCIS35 Ga.s Gcncraior 
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Electrical System 

The B6l-6,8 Electrical System provides all arming, 
fu/^ing, and firing signals required to initiate the nuclear 
system following proper prearming and delivery by strike 
aircraft. In addition, the MCs require that the bomb design 
provide stringent nuclear safety during ail phase s of the STS 
prior to bomb prearming (Chapter 4). \ ‘\ 


'* Wl 
-i- 


I Use control (Chapter 6) is pro- 

PSt ' 


vided by Category D TSt and Command Disable (CD) 
systems. Typical aircraft/bomb operational sequences are 
described in Chapter 3. 

Bomb electrical components that arc required to survi vc 
and function following laydown delivery are contained within 
the center bomb subassembly. These include the MC2918 
Firing Set. MC3554 Neutron Generator (2 each), MC4138 
Programmer, MC3656 Main Battery (2 each), and the 
MC4139 Junction Box. The MC4175 (2 each) or MC4137 
(one) Trajectory Sensing Signal Generators are also located 
in the center bomb subassembly. Electrical signals into the 
center bomb subassembly pass through a single MC3612 
Lightning Arrestor Connector (LAC) mounted on the cover 
plate. 

The MC4140 Interface Control Unit mounts on the 
preflight suba.sscmbly side of the cover plate. The MC4136 
Prcllighi Conu-oller mounts directly to the preflight ease. 
Similar mounting is used to secure the MC3624 Filter Pack 
and the MC2213 Actuator and Pulse Battery Assembly to the 
Uiil section. 

• MC2918 Firing Set _ 




!> 
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The MC2918, which contains the major bomb 
siifing elements, is divided into three regions that arc 
separated by high-icmpcraiurc-rcsisiani, clecirically 
insulating barriers. ^ 


The second region contains the iransvcner power • 
amplifier circuits and the MC2935 TSLSs. All signals 
entering the second region pass through the MC2969 
ISLS. 

The third region contains the MC2918’s high- 
voiiage transformer and X-unit. Parallel 5-M thick- 
film resistors arc provided to bleed the X-unit charge 
within about 5 seconds ifarmingpowerisremoved. All 
signals entering the third region pass through the con¬ 
tacts of the MG2935 TSLSs. The neutron generator 
trigger signals arc transformer-coupled through the 
exclusion region barrier. 


MC2969 Intent Stronglink Switch 

The MC2969 Intent Stronglink Switch,’’which is 
currently being produced for the B61 -3,4, B61 -7, W78, 

W80, and B83, is used in the B61 -6,8. The switch is part of 
the intent safety subsystem (Chapter 4). Functionally, the 
MC2969 isolates all firing set exclusion Region 2 circuits 
from exclusion Region 1 circuits 
until it receives the proper intent 
unique signal (lUQS) from the 
AMACsysiem. The switch, shown 
in Figure 7, consists of two main 
pans: a contact assembly of 14 
ceramic insulated output switches, 
and an electromechanical decoder/ 
driver that decodes the lUQS and 
drives the output switch assembly 
to closure given the proper signal 
(Figure 8). The drive mechanism 
is designed to operate the switch 
assembly to the closed (prearm) 
position after receipt of the correct 
lUQS paiicm of short and long 
pulses. An incorrect lUQS pattern 
will lock the MC2969 switch in the 
open position unti I receipt of a safe 
or reset input signal. A dc safe 
signal or a reset pulse (greater than 
1350 ms) will reset the decoder/ 
driver and place the switch assem¬ 
bly in the SAFE (open) position. 



Figure 7. MC2969 Intent Stronglink Switch 
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The MC2918, which contains the major bomb 
sating elements, is divided into three regions that arc 
separated by high-tempera lure-resistant, clccirically 
insulating barriers. ^ 


The second region contains the transverier power 
amplifier circuits and the MC2935 TSLSs. All signals 
entering the second region pass through the MC2969 
ISLS, 

The third region contains the MC2918’s high- 
voltage transformer and X-unit. Parallel 5-M thick- 
film resistors are provided to bleed the X-unit charge 
within about 5 seconds ifarming power is removed. All 
signals entering the third region pass through the con¬ 
tacts of the MG2935 TSLSs. The neutron generator 
trigger signals are transformer-coupled through the 
exclusion region barrier. 


MC2969 Intent Stronglink Switch 

The MC2969 Intent Stronglink Switch,*^ which is 
currently being produced for the B61 -3,4, B61 -7, W78, 

W80, and B83, is used in the B61-6,8, The switch is part of 
the intent safety subsystem (Chapter 4). Functionally, the 
MC2969 isolates all firing set exclusion Region 2 circuits 
from exclusion Region I circuits 
until it receives the proper intent 
unique signal (lUQS) from the 
AMAC system. The switch, shown 
in Figure 7, consists of two main 
pans: a contact assembly of 14 
ceramic insulated output switches, 
and an electromechanical decoder/ 
driver that decodes the lUQS and 
drives the output switch assembly 
to closure given the proper signal 
(Figure 8). The drive mechanism 
is designed to operate the switch 
assembly to the closed (prearm) 
position after receipt of the correct 
lUQS pattern of short and long 
pulses. An incorrect lUQS pattern 
will lock the MC2969 switch in the 
open position until receipt of a safe 
or reset input signal. A dc safe 
signal or a reset pulse (greater than 
1350 ms) will reset the decoder/ 
driver and place the switch assem¬ 
bly in the SAFE (open) position. 



Figure 7. MC2969 Intent Stronglink Switch 
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MC2935 Trajectory 
Slronglink Switches 

rhc MC2935 Trajectory Slron- 
■glink Switch/” which is currently being 
produced for the B61-3,4, B61-7, W80, 
and the BH3 is used in the B61-6,8. This 
switch is part of the second nuclear 
safety subsystem, the trajectory safely 
subsystem (Chapter 4), The MC2935 
isolates all firing set exclusion Region 3 
circuits from exclusion Region 2 cir¬ 
cuits until receipt of the required trajec¬ 
tory unique signal (TUQS), One 
MC2935 is used in each channel of the 
firing set. The switch, shown in Figure 
9, consists of two main pans: a decoder/ 
driver mechanism, and a functional 
c on lac t as sem b I y. The dccoder/dri ver is 
a dual-solenoid mechanism requiring 
two electrical input signals to operate. 
Thcswiich is designed to close the func¬ 
tional contacts when provided ihcpropcr 
TUQS shown in Figure 10. 

The MC2935 is a single try de¬ 
vice: that is, should it receive an incor¬ 
rect TUQS, it will mechanically lock. 
Having been locked by an incorrect 
T UQS, i t w i 11 not respond to further elec¬ 
trical input signals until it is manually 
unlocked and simultaneously reset by 
proper electrical reset input signals. 



Figure 9. MC2935 Trajectory Slronglink Switch 


Figure 10.Trajectory UniqucSignal 
(TUQS) 
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MC4141 Electrical Component 
Assembly (EGA) 

The MC4141 EGA is the ihircl deck of componcnis in¬ 
side the center bomb subassembly (Figure 12). The EGA 
houses the MC4138 Programmer, MC4175 or MC4137 Tra¬ 
jectory Sensing Signal Generator, 

MC4139 Junction Box, and the 
MC3656 Main Baiicries. 


MC4138 Programmer 

The MC4138 Programmer in¬ 
cludes two independent and identical 
channels (Figures 13,14). Two iden¬ 
tical circuit boards arc encapsulated 
in poly urctharvi foam in an aluminum 
housing unaltered from that of the 
B61-7 programmer. 


Figure 13. Printed wiringassembly ofa single channel of the 
MC4138 Programmer. 


|OtKcr“fuhcuons include ini- 
liation of the main batteries, provid¬ 
ing power and height of burst infor¬ 
mation to the radar, and receiving 
radar fire and crystal (impact) fire 
signals and transmitting them to the 
firing SCI if appropriate. To deter¬ 
mine delivery mtxJc and mission 
options, the programmer a^mmuni- 
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cates and receives data from the MC4140 Interface Control 
Unit(ICU). 

Except for differences in die machined holes in the 
housing for heat-sink components and edcntification mark¬ 
ings, the MC3637 Programmer for the B6I-7 (Figure 14) is 
visually identical to the MC4138 Programmer used on the 
B61-6,8. 


switches, die trajectory unique signal gcncratorcircuiiry pro¬ 
duces the pulse train outputs necessary to operate and close 
the MC2935 Trajectory Stronglink Switches in the Hring set. 

The roiamite switches used in the MC4I75 arc the 
MC3671 (2 each) and MC3672. Bodi the MC3671 (Figure 
15) and MC3672 use cases and end caps molded from diallyi 

/!-, A r,, ’ 0 bond the end caps to the 


Figure 14. MC3637 F*rogrammef 

MC4175/MC4137 Trajectory 
Sensing Signal Generator 
(TSSG) 

Two versions ofTSSGs will be used in 
the B61 -6,8. The MC4175 is identical to the 
MC3640“ used in the B61-7 except for the 
piglaii connector which attaches to the 
MC4139 Junction Box. The new MC4137 
TSSG will be available to support the B61- 
6 production in July 1991. The MC4175/ 
MC4137 TSSG is part of the second nuclear 
safety subsystem, the trajectory safety sub¬ 
system (Chapter 4). The MC4137 differs 
from the MC4175 in design, construction, 
and nuclear detonation safety design phi¬ 
losophy. 

MC4175 TSSG 

The initial B61-6 production will use 
two MC4175 TSSGs. Each MC4175 con- 
i^ns three fluid-damped, noniatching iner¬ 
tial sensing switches (rolamites) and cir¬ 
cuitry to output the trajectory unique signal 
(TUQS). When powered through ihcrolamitc 



Figure 15. MC3671 Roiamite Switch 
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Figure 16. Functional Requirement; for 
the Spin-sensing Rolamitcs, Minimum 
Spin Rate 


ease and to seal the electrical feedthroughs 
in the end caps. Each of the three rolamiie 
switches contains a set of noimaily open 
contacts that close when adequate levels 
of acceleration arc achieved. Both 
MC3671 s are oriented to sense radial forces 
generated by the bomb rotation about its 
longitudinal axis in frcefall delivery op¬ 
tions. Each of the radial switches is elec¬ 
trically connected in series with one in the 
other MC4175 located diametrically op¬ 
posite in the EGA. The MC3672 is in¬ 
stalled longitudinally to sense decelera¬ 
tion in retarded delivery options." Figures 
16 and 17 depict the operational require¬ 
ments of the rolamites for minimum bomb 
acceleration levels in frcefall and para¬ 
chute retarded delivery modes. 

The function of the rolamiie switches 
in the NtC4175 TSSG is to hold off power, 
either pulse battery (retard deliveries) or 
main battery (frcefall deliveries), from the 
TUQS-producing electronics. ThcTUQS 
is*‘siorcd’'inihcciectronics- Asdiscussed 
below , the MC4137 TSSG docs not “store" 
the TL'QS; only by correctly interpreting 
and storing the lUQS can the MC4137 
generate the TUQS. Storing the lUQS 
“enables" the MC4137 to generate the 
TUQS and hence is*‘inicni-cnablcd,“ 


Figure 17. Functional Requirements for 
the Retard-sensing Rolamiie, Minimum 
Parachute Rciardation 
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MC4137 TSSG 

riic “intent-enabled’' design of the MC4 137 requires 
ihc MC4137 TSSG electronics to “store” the lUQS signal 
which enables (operates) the MC2969 Intent Strong Link 
Switch in the firing set 
during the prearming of 
the bomb before aircraft 
release. Until the 
MC2969 arming se¬ 
quence is complele, the 
TUQS signal is not 
“stored” in the MC4137 
electronics. Without the 
information content of 
the lUQS signal, the 
MC4137 cannot formu¬ 
late the TUQS signal. 

The strong link/weak- 
link design and packag¬ 
ing of earlier B61 TSSGs 
is also fSlaincd. Addi¬ 
tionally, the new 
MC4 137 “infcnl-en- 
abled” TSSG i.s philo¬ 
sophically improved 
over the earlier TSSGs 
designed for the B61. 

Discussion of the n uc lear 
detonation safety of the 
two TSSG designs ap¬ 
pears in Chapter 4. 

During prearm of 
the bomb, the MC4137 
TSSG will store the 
lUQS code in“voIatiIc”memory; without power thccode will 
not be retained. The design of the MC4137 wil I assure that the 
lUQS is retained for a minimum of 7 seconds of power loss. 
Ifall arming power and monitor power is lost for longer than 
7 seconds-theMC4137 will interrupt the arm monitor line to 
iheAMAC. On Navy System 1 aircraft (A-7E and F/A-18), 
this will result in both the “ann” light and the “safe” light 
being illuminated when power returns. On the FSA aircraft 
(A-4M,A-6E,G), the“disagrccmenClightwill illuminate. A 
power dropout long enough to cause this condition will 
requ ire the pi lot to retransmit the IUQS to “rearm” the TSSG, 
Power dropouts of shorter duration will not affect the A MAC 
indications or cause additional pilot workload. The use of 
“volatile” memory for lUQS retention is a desirable nuclear 
safety design feature. 

Although the B61-6,8 MCs only require compatibility 
with Navy strike aircraft, the MC4137TSSG wi II be designed 
to be compatible with all aircraft approval for ettrriage of any 
B6I, Addi^nally, all aircraft listed in the B9() MCs will he 
tested for compatibility during development. Demonstration 


of aircraft compatibility and subsequent incorporation in the 
B61 ACCD will be restricted to those listed in the MCs. 

Whcrca.s the MC4175 TSSG uses two identical, non- 
conductiVC a.sscmblics to provide outputs to the two MC2935 
Trajectory Strong Link Switches in the firing set, both chan¬ 
nels of the MC4137 arc packaged in a single conductive en¬ 
closure (Figure 18). Tlicmaicriais selected arc304 stainless 
steel for exclusion region protection and 6061 aluminum for 
the cover. The single housing is designed to maintain me¬ 
chanical integrity of the housing, rolamitcs, and exclusion 
area electronics in abnormal environments. Isolation of all 
signals from the ease is required. 

The top assembly in Figure 18 is the exclusion region 
conUilning the rolamitcs, wcak-link ROM, and the circuitry 
necessary to communicate the ROM pattern through the 
rolnmiic contacLs to the microprocessor. The circuit board is 
ceramic. The circuit hoards in the middle of figure 18 arc 
iricniical, with surface mount components on one side (IcfU 
and leaded, "ihroiighdiolc” components on the other. This 
circinlr\ )s nioiinteduuhe.steel lopofihocxclusion region and 
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lies bcncaiii tlic alutninuii) cover. 

Two new rolamiics iirc in dcvclopmcni; the MC4146 to 
scn.se bomb spin and MC4147 Tor retard deliveries. Both arc 
steel-ease, hermetically sealedassemblies. As in the MC41 75 
the spin rolamiics arc connected in series between the two 

channclsandarcdiamctricallyoppo.scd in die bomblorequire 

true spin of the bomb. The new rolamiics arc approximately 
two-thirds the size of the MC3671/3672 rolamites and de¬ 
signed for increased ruggedness and predictability in abnor¬ 
mal high shock environments. Since the rolamite ease and the 
band is electrically grounded to the TSSG case, the contact 
block in the roller is isolated from the roller and the band. The 
required electrical path is through the pins and the contact 
block. Figure 19 illustrates lhc"rcst" positionof the rolamite 
(top and side views). The band of each rolamite is designed 
to fail in a predictable manner in very high shock levels. Fig¬ 
ure 20 shows the resultant position of the rolamite after sus¬ 
taining a shock sufficient to break the rolamite band. Note the 
contact block is welded to the band, not to the roller. The 
resultant failure position of the band after a very high shock 
is repeatable and illustrates the safety of the design. To fail 
armed, the isolated contact block would have to provide an 
electrical path through the pins. Previous rolamite designs 

(including the MC3671/MC3672) have uscdelcctrically-iso- 

latcd materials for the eases and utilized the band as the con¬ 
ductive path between the input and output pins. Shorting 
through the band of the MC4146 and MC4147 will .shunt the 
signal to ground. The contact block as.sembly provides the 
only means of an electrical path from input pin to output pin 
internal to the rolamite. Figure 21 provides another illustra¬ 
tion of the “rest” and “actuated” rolamite states and the 
resultant position after a high .shock has failed the rolamite 
band. 

To format the TUQS 
signal. MC4137TSSG will 
combine 24 bits of the lUQS 
signal with 24 bits stored in 
a thermal wcak-link ROM 
(read only memory) cur¬ 
rently in development. Lxjw 
melt al loy loops on a printed 
circuit board (Figure 18) 
form the 24 bits of the 
ROM. Melting of the 
“loops” in high tempera¬ 
tures from abnormal envi¬ 
ronments will result in ei¬ 
ther opening or shorting to 
the board. Either alterna¬ 
tive is “safe”; combining 
the wcak-link ROM and the 
lUQS signal will lock up 
the MC29.35 TSLS. 




Figure 20. MC4146/.MC4147 Rolamites. “Safe” Band 
Failure 
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Figure 21. ,\l('4 1 46/M('.i 147 Rolamites 
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Main Battery and 
Cable Assembly 

The baticry and 
cable assembly consists 
of die MC3656 Main Bal- 
icry“ (Figure 22) mated 
widian integrai cable (Fig¬ 
ure 23) and is identical to 
that used in the B61-7. 

Two each are used in the 
B61 -6,8, one per channel. 

The MC3656 isa low-volt¬ 
age thermal battery used 
to supply power to the elec¬ 
trical system beginningno 
later than 1.7 seconds from 
initiation and lasting for a 
m inimum of 120 seconds. 

Lithium-silicon/iron di¬ 
sulfide (Li(Si)/FcS^) elec¬ 
trochemical system is 
used. Lithium-silicon al¬ 
loy is the anode and iron 
disulfide is the active cath¬ 
ode material. As in all thermal batteries, a fused salt electro- Figure 22. MC3656 Main Battery^ 
lyte is activated by healing it to a temperature above the 
electrolyte’s melting point using a pyrotechnic heat source. 

An MC2046 Igniter (1-A no-fire) fired by the MC4138 Pro¬ 
grammer is used to activate the pyrotechnic. 
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MC4139 Junction 
Box 

1‘hc MC4 139 
Junction Box (Figure 
24) serves as a junction 
ancidislribution box for 
a major portion of all 
arming, fuzing, and fir¬ 
ing signals. Anelectri¬ 
cal connections between 
the center ease, the pre- 
flight, and tail subas¬ 
semblies are made 
through the junction 






single multilayer circuit tx)ard mat electrically inierconnecLs" 

with 11 SAl387-iypcrack-and-panclconncctorsand2SAI530 
double-density rack and panel connectors. A molded cable 
terminated with an MC3612 Lightning Arrestor Connector 
(LAC) is also attached to the junction box. This assembly is 
encapsulated in mica-fillcd epoxy. 

The MC3612 LAC^ (Figure 25) is a 41-pin rutile 
panicle (TiO,) design. 


Figure 24, MC3616 Junction Box 


Figure 25. MC3612 Lightning Arrestor Connector 


I he LAC features arc 
(ahricated inioanSA3016 
connector shell which is 
an extended version of die 
hcrmciical ly scitlcd, stai n- 
less steel, SA1457 con¬ 
nector. A suiinless steel 
web with holes for each 
connector pin is used to 
provide a small air-gap 
between the pins and the 
return path. The air-gap 
around all pins is filled 
with rutile partJcIc.s and 
then sealed. 1*hi.s a.sscm- 
h I y gi ves a nom i nal break¬ 
down vulutge of KXX) V 
Jiul a maMrntifn acccfn- 
ahic breakdown voltage 
ot i V when icsti‘d 
-'iili a H'-kV/ij>. 
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MC4140 Interface Control Unit 

The MC414() In- 
tcrfacc Control Unit 
(ICU) is a microproccs- 
sor-based component 
(Figure 26) housed in a 
hermetically sealed 
stainless steel coniaincr 
identical to that of the 
MC3638 ICU used on 
the B61'7 (Figure 27). 

The ICU is mounted on 
the aft surface of the 
center case cover plate. 

Cables from the ICU 
interconnect with the 
MC3624 Filter Pack, the 
MC4136 PFC, and the 
MC3612 LAC pigtail on 
the MC4I39 Junction 
Box. Each electrical 
connector is hermeti¬ 
cally scaled. Both the 
programmer and ICU 
useLhesamcIntcl80C5l 
microprocessor. The 
ICU has functional re¬ 
quirements while on- 
boa rd the carri c r a i rc ra f t 
and after release of thebomb. Whileon-board the aircraft, the 

ICU is designed to provide: Figure 26. Cover Assembly of the MC4140 Interface 

Control Unit 




a. Logic Monitor - Circuitry necessary to monitor the state 
of the MC2969 Intent StrongUnk Switch (enabled, safe) and 
provide the proper response to both FS A and System I aircraft 
AMAC circuits. Additionally, an interface 
with the MC4137 TSvSG is provided to as¬ 
sure feedback to the aircraft in case of power 
dropouts. 

b. Delivery Mode (FFA, FFG, REA, or 

REG)- ICU circuitry stores the intended 
delivery mode as selected from the aircraft 
(System I AMACs) or the aircraft and the 
MC4136 PrcHighi Controller JFSA/B 
AMACs)."". . 


Figure 27. MC3638 ICU 
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d. Safe Separation Time (SST) Selection -Two independent 
SSTs, TA and TB arc set on the prcflight controller. Some 
AM ACs can select between TA or TB. Tlie ICU is designed 
to store and use this information.^ 

After bomb release, the MC4140 is wit hout p ower until 
the rise of die weapon s ystem pulse batteries.) 








V)V. 


j Ihc re¬ 
maining (^unction of the ICU is to perfonTTthe timing and 


*‘gatc” pulse battery power to initiate the spin rocket or gas 
generator. After the “deploy” function, the ICU tasks are 
complete and “shutdown” is commanded. 


MC4136 Preflight Controller 


The preflightcontroller also 


houses the DE1002 Coded Dc^ce and MC3246A Thermal 
Battery (identical to the MC3246“ in the B61-7 except lith- 
ium-silicon/iron disulfide (Li(Si)/FcS 2 ) electrochemical sys¬ 
tem is used) for command disable, the JI connector for PAL 
operations or interconnecting with the MC4142 Strike Enable 
Plug, and the PAL voltage regulator. The command disable¬ 
ment and PAL components are described in Chapter 6. The 
preflightcontroller is mounted to the preflight bomb subas¬ 
sembly case. 

The switch markings and function associated with each 
switch position arc as follows: 


TA andTB - For non-laydown deli veries, two independ¬ 
ent aircraft safe escape times (TA and TB) are selected. The 
selection of bach requires the manipulation" of two digital 
switches, one for the tens da la (1 -10) and one for units data (0- 
9). The maximum safcescapc lime for the B6l is69 seconds; 
therefore, the 7,8,9, and 10 switch positions of the tens switch 
are shorted to the 6 switch deck. Thus, 109 becomes 69,77 
becomes 67, etc. No provision is made to prevent TB settings 
shorter than TA or vice versa. The selection of the appropri¬ 
ated safe escape time is made from the aircraft during bomb 
prearm. 


Delivery - 2 position; RE,FF 
RE - retarded 
FF - freefaJI 


Aircraft with FS A AMACs like the Navy A-6E can not 
override Uiis switch. Arm position selections on the AMAC 
arc limited to AIR and GROUND. System 1 AMACs like the 


Navy A-7 and A-18 can override this switch; all four delivery 
options arc selectable from the cockpit. 


uci^v - 3 posiuon: (J. H. J 


G — 0.3 second deployment delay 
H — 0.6 second deployment delay 
J — 1.6 second deployment delay 
Additionally, positions G and H provide short laydown 
delay (30 seconds) and position J provides long laydown 
delay (80 seconds) for aircraft safe escape from laydown 
deliveries. Discussions at the B61 POM and the B61 Environ¬ 
mental Sugroup have recently addressed the use of “J” by 
Navy aircraft Future B6l ACCDs may restrict the use of 
longer delay times than compatibility tests and analyses have 
shown to be sufficient to provide separation. No settings 
longer than lhc“minimum” times now specified in the ACCD 
will be approved. 
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MC2213 Actuator and Pulse 
Battery Assembly 

The MC22I3^'' (Figure 29) consisis of two MC2238A^ 
or MC2238B PulseBatlcrics^an MC2217 Pulloui Switch.and 
a capacitor-resistor network. Aircraft power is rct|uired 
lx:forc rcIciLSC to charge the capacitor network. When extrac¬ 
tion (Kcurs, thcMC2217SwiLchcomplctcsiltccirciiittoapply 
the capacitor-stoned energy to the electric matches of the 
MC2238A/B Pulse Batteries. 'Hie MC2238 PuLsc Batteries, 
depicted in Figure 29. will be replaced by MC2238A or 
MC2238BS (Figure 30) that arc designed and tested to the 
greater electrical load of the B61 -6.8. Resistors arc provided 


to bleed off the charge in less than two .seconds if arming 
power is removed. 

'nicMC2238A/MC2238B Pulse Batteries supply power 
to the lx)mbelectrical system until the MC3656 Main Batter¬ 
ies retreh o|>crating voltage. The pulse batteries are required 
to provide source power to the ICU (including spin rocket or 
parachute initiation). programmcr(including the main battery 
initiation), and the TSSG to drive the MC2935 Trajectory 
Stronglink Switches in retard delivery options. 


POWER IAIRCRAFT) 

STORAGE & DISCHARGE SYSTEM . 




SA 1633 TUBE SOCKETS [2 EACH] / 
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Figure 29. MC'2213 Actuator 
and Pulse Battcrv A.sscrnblv 
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Figure 30. MC2238A Thermal Battery 
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MC3624 Filter Pack 

'I'hc function of the MC3624 Filter Pack^ (Figure 31) is 
to attenuate aircraft-wiring-inducai EMR/EMP signals and 
loprovidcanclcctricalconncciorforaircrafl interfacing. Tlic 
MC3624 is housed in an aluminum casting that is attached to 
the inside surface of the tail subassembly, A longjunior trilock 
(LJT)-typc connector protrudes through a hole in the tail 
subassembly for aircraft electrical interfacing. Inside thealu- 
m inum housing arc fillers that perform the EMR/EMP attenu¬ 
ations. The MC3624 is used in tlic B61’-7. 


Figure 31. MC3624 Filter Pack 


MC3025 Signal Selector 

The MC3025 Signal Selector, sometimes referred to as 

thc“nomnal/ovcrridcswitch” is an lUQS-gencratorcombined 

with a manually operated two-position switch (Figure 32). 
The purposcof the MC3025 is to supply the lUQS to drive the 
MC2969 Intent Strong Link Switch in the firing set to com¬ 
plete the preanning operation when the AMAC in the aircraft 
is not lUQS - capable. At the prcsenltime, the Navy A^M, A- 
6E, and A-7E aircraft do not have lUQS-capable AMAC’s. 
There is a high level DoD/DOE agreemenp^ that all aircraft 
will be equipped with lUQS-capable AMAC’s by i January, 
2000. By that time all MC3025’s will be removed from the 
B61-6,8. 

The MC3025 was developed for the 
B61-5 (FPU June 1977) and was subse- 
quendy used in the B61*3,4, Since May 
1988, new production B6l-3,4 have not in¬ 
corporated MC3025 Signal Selectors. ..Re¬ 
moval of the MC3025 from the B61-3,4'’will 
begin in 1989. These signal selectors will be 
used in the B61-6,8. 

The switch positions are designated 
NORMAL and OVERRIDE. Two inde¬ 
pendent mechanical motions, linear and ro¬ 
tational, are required to change switch posi¬ 
tions, IntheOVERRlDEposidon, theswiich 
allows prearm power to be applied to the 
input terminals of the intent unique signal 
generator in the MC3025, With the MC3025 
in OVERRIDE, the nuclear detonation safety 
of the B61 -6,8 is reduced. The nuclear deto¬ 
nation safely requirement in abnormal (accident) environ¬ 
ments and the nuclear safety concerns of the MC3025 arc 
addressed in Chapter 4. 




Figure 32. MC3025 Signal Selector 
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Cables 

Sonic cables from ihc parent wcii|X)n will be reused for 
the B61 -6,8. These include the radar and nitrogen cartridge 
cables in.sidc the center ease frofn the B61 -0,2,5 and the de¬ 
ployment initiation cables to Uic gas generator and spin rocket 
inside die prcflightsubassembly from the B61-5 only. There 
are six ncw-dcsign cables identified by CF-numbers; four in 
the center ease and the one between the prcflight and tail 
sections. In addition, the build of the B6l-6,8 will require ten 
new, carryover-design cables; however, five of these cables 
arc part of a “parent” B61 -5 and arc not ncccssiiry for a B61 - 
5 to B61 -8 conversion. All cables arc constructed of teflon- 
insulated conductors within a polyurethane or kapton sleev¬ 
ing. Three connector types arc used: junior irilock (JT), long 
junior u-ilock (LJT) with rigid inserts,and rack and panel. The 
table below summarizes the B61-6,8 cable requirements. 


MC4142 Strike Enable Plug 

The MC4142 Strike Enable Plug attaches to the j I 
connector on die MC4136 Prcflight Controller. To meet the 
MC requirement for a separable component “vital to the 
function of the bomb,” the S EP provides two circuit interrup¬ 
tions; lUQS and the nuclear identification line from the 
AMAC. 



Cables for B61-6,8 



—New Build— 


Parent 

Carry- 

New 


Bpfn.b 

Over 

Desion 

£E 

Radar-J B '/ 



1805 

Nj-JB V 



1804 

Gas Gen 

(61-5) 


2241 

SpinRocket 

(61-5) 


2240 

FP-MC3025 

(61-5) 


2262 

FP-ICU 

V 


2638 

ICU-PFC 

V 


2636 

ICU-PFC 

- ^ 


2637 

ICU-LAC 

V 


2635 

FP-PFC/ETU 



2940 

JB-FirineSet 

„ A 

- - - - • 

2654 

JB-Disable 

- .- 

V 


FiringScl-NG 


V 

2906 

FiringSet-NG 


V 

2907 

Pullout 

(61-5) 


2233 

Pullout 

(61-5) 


2438 


Figure 33 illustrates a B6l-6,8 aboard a typical Navy 
aircraft and shows the CF2233 or CF‘2438 Pullout Cable and 
pullout lanyard hook-ups. Both pullout cables arc EMR- 
protcctcd cables that provide electrical interfacing between 
the B61 -6,8 and the carrier aircraft. The CF2233 will be used 
with FS A AMACaircraft like the A-4M and A-6E,G while the 
CF2438 will be used with System 1 AMAC aircraft likclhe A- 
7Eand F/A-18. Both connectors of thcCF2438 arc identical 
types and could be reversed. The differences in the physical 
appearance (Figure 33) should preclude ihaL(x:currcncc. 


Figure 33. B61 -6,8 Aircraft Interface 
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3. System Operation 


Prcflighi opera lions iind arming, fu/.ing, and firingcvcnLs 

for the four bomb delivery options arc discussed in this 
chapter. A simplifictl functional block diagram (Figure 34) 
and pictorial event sequences for each bomb delivery option 
(Figures 35-38) arc included. Those procedures and electrical 
system operations that arc common to each delivery option 
arc presented below. 

Before lakeoff.theappropriatc switch sellingsarcmadc 

on the MC4136 Preflight Controller as described in Chapter 
2. At this lime, the PAL could be unlocked through the J1 
conneciorof the MC4136 with ground equipment (Chapicr6) 
or after takeoff if the aircraft is equipped with a PAL-capable 
AM AC. Complete bomb prearming cannot be accomplished 
until the PAL is unlocked (i.c.. enabled). The MC4142 Strike 
Enable Plug would be in.sialled. If iheaircraft docs not contain 


an lUQS-capabIc AM AC. the MC3025 Signal Selector must 
be rotated to tire OVERRIDE position. 

The bomb may now be prearmed before release by 
rotating the AMAC selector switch to the desired option 
position. On FSA/B AMACs, this selector switch provides 
two positions: air or ground. Retard or Irecfall is obtained by 
the delivery switch position on the preflighi controller. On 
System I AMACslikethc A-7EandF/A-l8.thc AMAChas 
four positions corresponding to the four delivery options. 
FFA, FFG, REA, and REG. With this capability, the RE/FF 
Delivery Switch on the MC4136 PFC is overridden. 

The F/A-18 AMAC generates a unique train of pulses 
(lUQS) to drive the MC2969 Intent Stronglink Switch to the 
closed (enabled) position. Without the AMAC-produced 
lUQS, the MC2969 will be enabled by the MC3025 Signal 




l•■i^u^l• 34. lUil ('.X KuMLiH'nal BliKk Diagram 

































Sclcxior (in OVERRIDE) wiih cic-prcarm power when the 
AM AC is roiatcd lo an ARM position. The MC4137 TSSG 
stores the lUQS. On another line, the AM AC applies preann 
power to charge the capacitors in the MC2213 Actuator and 
J^lsc Baucry As.^mbly.l 




At bomb release, me Ct-zz33 (Vb/K aircrait) or Cl“2438 
(System I aircraft) Pullout Cable and the pullout pin of the 
MC2213 are extracted via the bail and lanyard from the bomb 
(Figure 31). There is not a requirement lo extract the lanyard 
pullout pin before the bail pullout cable. The “soft** memory 
circuits of the MC4140ICU arc designed to be without power 
from the earliest pullout cable extraction to the latest pulse 
battery rise. Atpullout, the MC2213 discharges the capaci¬ 
tive network through the closed switch contacts into the 
MC2238A/B Pulse Battery ignitors. 

When the pulse battery rises to a nominal 19 V (-'80 ms), 
both the MC4138 Programmer and the MC4140 ICU begin 
timing and each microprocessor starts its instruction set. The 
prognimmcrchecks the source ofpower, pulse battery or main 
battery (“shutdown’’is commanded if the power source is the 
main battery — an abnormal situation)^and at ap prox i mately 
50 ms begins interrogating the ICU., 




r 


personnel and nuclear detonation safely discussed in Chapter 
4. the ICUcom mands’*shutdown’’ifdclivery option informa- .^ 



tion is missing. 


'After receipt of the mierroganon data, the programmer 
“gates” (or “connects and then disconnects”) pulse battery 
power to initiate the main battery ignitors. The sole remaining 
function of the ICU after answering the programmer’s inter¬ 
rogation is to “gate” pulse battery power at the selected de¬ 
ployment lime (G.H.J) to initiate either the gas generator 
(rctarddcliverics) or spin rocket (frecfall). Having completed 
iLS requirements, the ICU microprocessor is held in a “shut¬ 
down” mode where no further outpuLs.are possible. 

At this point in the operational sequence, the main 
baiterics’ voltage is rising and will be at operating voltage 
before first possible ground impact in REG (laydown), the 
programmer has received all inputs from outside the center 
case (except for radar or crystal signals), and the spin rocket 
or gas generator has been initiated. Completion ol the fu/.ing 
and firing operations will be described for each bomb del ivory 


rn(KlC- 


Freefall Airburst (FFA)Delivery 

Upon initiation of the spin rocket, the bomb spins lo a 
minimum roll rate of about 3 revolutions per second within 
about I second (Figure 35). The canted fms will sustain the 
roll rate. This roll rate closes the radial inertial switches 
(rolamiics). At 3 seconds after release, the programmer 
“gales” main battery power to the MC4175 or MC4137 TSSG 
to drive the MC2935 Trajectory Stionglink Switch in the 
firing set (dual channel). 

The aircraft-selected safe separation time (SST) has 
been previously communicated by the ICU to the program¬ 
mer, At 7 seconds before SST, the programmer “gales” main 
battery power to the radar and at 4 seconds before SST, the 
programmer activates circuitry to communicate height of 
burst selection to the radar. 



' At safe separation time minus 3 seconds, the program¬ 
mer connects main battery power to the uansvener oscillator 
in the firing set (Al). At safe separation-time, similar 
programmer circuitry connects main battery power to the 
firing set iransvcricr (A2). With these two inputs, each 
clccironic iransvencr can charge the 2.0- pF firing set X-unii 
capacitor and the 0.6-pF neutron generator capacitors to 
approximately 3300 V and 2400 V, respectively, in less than 
I 1.2 seconds. 
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Figure 35. Event Sequence, Frccfall Airburst 


At safe separation time plus 1.5 seconds, programmer 
fire circuitry is enabled. Once this occurs, any subsequent 
radar fire signal will result in the programmer providing 
closure of the main battery to fuing set (A3), causing X-unit 
discharge which ’miiiates the neutron generator liming cir¬ 
cuitry and fires the nuclear primary detonators. 

If backup fuzing is selected, at SST plus 1.5 seconds the 
programmer will also accept impact crystal signals as valid 
fire signals. If neither radar nor crystal signal is received, the 


programmer will provide A3 at 120 seconds (design life of the 
main batteries). If backup fuzing is not desired, the program¬ 
mer will not deliver A3 if impact crystal signal is received. 
Contact preclude is not guaranteed. If the bomb impacts the 
ground with a charged firing set, the X-unit may be triggered 
by the impact (bypassing the programmer), even if backup 
were not desired. 


I 
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FiRiire 36. Evcm Sequence. Free fall Groundbursl 


Freefall Groundburst(FFG) Delivery 

Upon iniiiaiion of ihc spin rocket, the bomb spins to a 
minimum roll rate of about 3 revolutions per second within 
about 1 second (Figure 36). The canted fins will sustain the 
roll rate. This roll rate closes the radial inertial switches 
(rolamites). At 3 seconds after release, the programmer 
gates main battery power to the MC4175 or MC4137 tSSG 
to drive the MC2935 Trajectory Stronglink Switch in the 
nnng set. 

The aircraft-selected safe separation time (SST) has 
been Dre v i ni i s l v communicated bv lh<^ ir.n , 1 ... n r nrn tm 
mer.| 


/( 


j___ _ _ 

At safe separation time minus 3 seconds, the program^ 
mer connects main battery power to the transvcncro.scillator 
in the firing set (Al). At safe separation time, similar pro¬ 
grammer circuitry connects main battery power to the firing 
set transvertcr (A2). With these two inputs, each clecuonic 
trans verier can charge the 2.0- uF firing set X-unit capacitor 
^"^j;!’‘^^'^'*'^"‘^“‘^o"g®"<=™‘0''c->pacitorsioapproximalcly 
3300 V and 2400 V, respectively, in less than 1.2 seconds. 

At safe separation time plus 1.5 seconds, programmer 
fire circuiuy is enabled. Once this (Kcurs, the subsequent 
ciy.sial fire .signal will result in the programmer providing 
closure 01 the main battery to the tiring .set (A3), causinc X- 
unit discharge which initiates ihe neutron generator timing 
v.ircuitr\- and I ires Uic nuclciir pnm;irv deionjiors. 
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Retarded Airburst (REA) Delivery 

generator into the volume enclosed by the 
ic cstoping tubes starts the parachute deployment process 
1 igure 37). The deceleration produced by the deployed 
parac ute closes the longitudinal nonlatching inertial switch 
ro amite). The design of the rolamite guarantees a closure 
imc greater than the maximum required (0.734 seconds) for 
»e MC4 J 75 or MC4137TSSG tocnable the MC2935 Trajec- 
Lronglink Switch in the firing set. 

3‘rcraft-selected safe separation time (SST) has 
; ocen previously communicated by the ICU to the program- 
'Ttcr. At 7 seconds before SST. the programmer “gates” main 
■ ‘o ihe radar and at 4 seconds before SST. the 

programmer activates circuitry- to communicate height of 
burst .selection 


Ai sale -separation time minlll! 3 SftCOrids, the program- ' 
mer connects main battery- power to the transvertcr oscdlator 
m the firing set (Al). At safe separation time, similar ’ 
programmer circuitry connects main battery power to the 
firing set transvener (A2). With these two inputs, each 
electronic transvener can charge the 2.0- pF firing set X-unit 
capacitor and the 0.6-pF neutron generator capacitors to 
approximately 3300 V and 2400 V. respectively, in less than 
1.2 seconds. 

If backup fuzing issclcctcd.atSSTplus 1.5 seconds the 
programmer will accept either a radar fire or impact crystal 
signal as a valid fire signal. Activation of the impact cry-stal 
at parachute-retarded terminal velocities (80 fps) will not be 
reliable in all terrain. If noiificr radar nor cry-stal signal i.s 
rcfcivcd, the programmer will provide A3 at 120 sccond-s 
(design life of the main hattcrvi. 


i It 
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Figure 38. Evcni Sequence, RciardCd Groundbursi (Laydown) 


>^5 


Retarded Groundburst (REG) or 
Laydown Delivery 

Firing ihc gas generator into the volume enclosed by the 
telescoping lubes staris the parachute deployment process 
(l-igurc 38). The deceleration produced by the deployed 
parachute closes the longitudinal nonlatching inertial switch 
(rolamitc). The design of the rolamiic guarantees a closure 
time greater than the maximum required (0.734 seconds) for 
the MC4175 or MC4137 TSSG to enable the MC2935 Trajcc- 
lory Sironglink Switch in the firing set. 

For the laydown delivery mode, the safe separation 
times .selected on the preflighi controller do not apply. Air¬ 
craft safe escape maneuvers arc instead constrained by the 
laydown delay lime, which is 30 seconds or 80 seconds. 
Selection of G or H deploy time results in a 30-sccond delay, 
whereas J provides an 80-.sccond delay. As di.scusscd earlier, 
selection of J may be restricted in the B6l ACCD except for 
aircraft requiring that time to ensure .safe escape^ 




•i I 


At safe separation lime minus 3 seconds, the program¬ 
mer connects main battery power to the transvcncroscillaior 
in the firing set (A1). At safe separation lime, similar pro¬ 
grammer circuitry connects main battery power to the firing 
set iransvcncr (A2).'With these two inputs, each electronic 
transvcrter can charge the 2.0- pF firing set X-unii capacitor 
and lhe0.6-pF neutron generator capacitors to approximately 
33(X) V and 2400 V, respectively, in less than 1.2 sccond.s. 

At safe separation lime plus 1.5 seconds, the program¬ 
mer will provide closure of the main battery to firing set (A3), 
causing X-unii discharge which initiates the neutron genera¬ 
tor liming circuitry and fires the nuclear primary detonators. 
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4. Nuclear Safety 


General 

This chapter summarizes the B6I-6,8 nuclear safety 
design and evaluation program. The intent of the nuclear 
safety design is to a.ssure that when the B61 -6,8 is exposed to 
normal or abnormal (accident) environments, there is a 
probability of less than I in lO’or I in 10^. respectively, that 
its TNT e quivalent yield will not e xceed four po unds. 


i 

i 

I. 

r 

i 


Nuclear safely requires isolalion of all signincam volt¬ 

ages from key components within the firing set and from 
nuclear system detonators, thus precluding simultaneous 
detonator function. This i.solalion must be as.surcd for all 
normal and abnormal environments except for authorized 
use. Although the B61 -6,8 contains internal power sources, 
these sources arc limited to a maximum terminal voltage of 
less than 50 V. Safety analyses conservatively a.ssumc these 
-power sources to be activated in all abnormal environment 
scenarios. 

System nuclear safety evaluation is accompi ished both 
by analysis and by testing to verify the predicted results. In¬ 
cluded in this chapter arc a description of the B61-6,8 nuclear 
safety design and a summary of the nuclear safety evaluation 
program to be performed. The limited number of fullscalc 
tests scheduled as part of the B6I -6,8 evaluation program is 
due to the applicability of B61 -3.4 and B61 -7 nuclear .safety 
evaluations. ‘ 

Design Theme 

The following goals for achieving nuclear siifciy 
were established for the B6l-3,4 and B61-7 development 
programs and are also applicable to the B61-6.8 design: 

• Provide an assured, predictable safe response of 
t - the bomb in a broad range of accident environments. 

including fire, impact, crush, and puncture 

• Provide a design that is insensitive to electrical 
faults in accident situations 

• Provide a design that meets the nuclear safety 
requirements without requiring detailed definition of 
the abnormal environments. 


The basic theme of the B61 -6,8 nuclear safety design 
is to isolate nuclear safety critical circuits from all unintended 
sources of electrical energy. This theme is implemented 
through nuclear safety design concepts that include: 

Exclusion Regions — The important features of the 
exclusion region design concept are: 

(a) con.solidaiion of the safety-critical circuit ele¬ 
ments into a localized region of the bomb, 

(b) use of physical barriers between safety-critical 
elements and all energy sources that could cause 
the critical elements to function, and 

(c) controlled access of intended electrical signals 
through the physical barriers by special unique- 
signal-operated devices that can be actuated only 
in the intended use mode. 

• Stionglinks — Access to the safety-critical circuit 
clcmcnis contained within the exclusion regions is 
controlled by safety devices called stronglinks. These 
devices provide the only access for electrical energy 
into ihca.ssociaicd exclusion region, which is completely 
enclosed by the physical barrier. In ihc B61 -6.8. these 
devices arc uniquc-signal-opcraicdstronglinkswitchcs 
(MC2969 Intent Stronglink Switch and MC2935 
Trajectory Stronglink Switch). 

• Wcak-links — A weak-link is a functional element, 
critical to the Initiation of the nuclear system, and 
designed to fail irreversibly at environmental levels 
less severe than those which fail or bypass the .strong¬ 
link devices and physical barriers. 

• Colocation of Weak-links and Stronglinks — The 
wcak-links and stronglinks arc packaged in close 
proximity (colocated) within the c.xclu.sion rcgion(s) 
so that they experience comparable environments. 
S ince a weak -1 ink is designed to fai I at an cn vi ronmenial 
level well below the failure or bypass levels of 
stronglinks and barriers, the proper sequential response 
of these safely elements will occur incredible abnormal 
environments. 

•Signal Incompaiibiliiy/Inoperability— Unique sig¬ 
nal paiicms arc required locloscihc.sironglink switches, 
which control ciccuncal signal access to isolated exclu¬ 
sion region.s. These features virtually eliminate the 
likelihood that typical electrical energy .sources as¬ 
sumed to be present in an accident situation could drive 
these switches to a closed (unsafe) position. 
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Design 

ImplcmcnuiLion of Uic above design ihcnie iscxpectc(i 
10 provide levels of safely ^assurance againsi prcmaiurc nu¬ 
clear dcionaiion of I in 10’ and 1 in 10^ in normal and 
abnormal environmcnis. respectively. ITirec indepcndcni 
safely subsystems have been designed inio ilie B61 -6,8 elec¬ 
trical system lo satisfy the safety assurance levels for the 
environments defined in the B61-6,8 STS: 

(1) Intent Safely Subsystem, 

(2) Trajectory Safely Subsystem, and 

(3) Arming Safely Subsystem. 

Two of the safely subsystems, the intent and trajectory sub¬ 
systems, constitute the abnormal environment safely design. 
Each independent system is composed of a unique signal 
generator (USG) and an associated unique-signal-opcraied 
stronglink switch. Thestronglink switches are located wiiliin 
the MC2918 Firing Set. The intent and trajectory subsystems 
operate in series, with each expected to provide a safely 
assurance level of greater than I in 10^ Together, they 
provide an assurance level of greater than 1 in 10® in normal 
and abnormal environments. The third subsystem, the arming 
subsystem, is intended to provide a safety assurance level of 
greater than I in 10^ in normal environments only. The three 
independent systems together, then, provide a safely assur¬ 
ance level of I in 10’ in normal environments. Figure 35 is a 
simplified schematic diagram of the pertinent mechanical 
features and electrical components involved in the 861-6,8 
nuclear .safety design. 

The center case section contains the nuclear safety 
critical elements of the B61-6,8 and is designed to ensure 
electrical system survival and function following laydown 
impact on hard targets. As will be described in this section, the 
robu.si mechanical design for reliability, mitigates the effect 
of some abnormal environmcnis. Center ease components arc 
enclosed within two metal housings. The outer case .structure 
i.s a thick (0.534 in., 13.6 mm) aluminum extrusion containing 
the nuclear system and electrical components. This ease is 
dosed at the aft end with an aluminum cover plate sccurctl 
with a ring which threads into the inner surface of the ca.se. 
The only external point of entry forelcciricaJ energy through 

i 


J 1 

MC2918 

The MC2918 Firing Set is the electrical system .safely 
design focal point for abnormal environments 'flic .safely 


design concepts of exclusion region isolation, wcak-link/ 
slronglink element colocation, and unique-signal .safety de¬ 
vices arc implemented in the firing set. TItc exclusion regions 
arc physically defined by cells in the firing set that arc formed 
by the walls of the firing set container and the .slronglink 
switches. Figure 39 shows the firing set with the covers 

removed, revealing the exclusion regions defined as follows:. 

Region / — Exclusion Region I of the firing set is 
protected by the bomb ease and the LAC. All firing set 
components not isolated from exicmaJ electrical sig- 
nals by a .slronglink switch arc in Region l.( 


Region 2 —Thiscxclasion region is completely within 
the firing set container. It is isolated by the insulaiiyc 
bamer walls of the container and su-onglink swiicKes. 
The region contains the firing set power amplifier 
circuits and the MC2935 Trajectory Suonglink 
Switches. 

Region 3 —This region contains the safety-critical fire 
set CDU circuits and weapon detonator cable assem¬ 
blies, The firing set CDU circuits arc isolated from 
unintended electrical signals by the firing set container 
wallsand the MC2935Trajectory Slronglink Switch in 
series with the MC2969 Intent Slronglink Swdich. The 
firing sctcovcrs the detonator cablc.s and p rotects them 
from inadveaent ciccu i cal ener gy. f 


k 
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The physical layout of the MC29I8 Firing Set is 
conFigurcd to provide colocation of wcak-link/stronglink 
elements. Ideally, the packaging would assure that the 
stronglinks arc provided greater protection from severe 
environments than the wcak-links. However, this ideal is 
seldom attainable within the consu'ainus of volume, form- 
factor, and adjacent assemblies. The alternative is to control 
the location and/or dcslruci paths so that it is assured that the 
weak-links’ dcsuuclivcenvironmental level is reached prior 
to the lime that the stronglinks’ bypass environmental level is 
reached. For example, in some fire environments, heat may 
be directed at a side of the weapon that would tend to heat the 
MC2935 Slronglink Switch faster than the firing set CDU 
capacitor, and the MC2935 Slronglink Switch temperature 
may be greater than the capacitor temperature; however, the 
capacitor will become irreversibly inoperable while the 
MC2935 is niainiaining isolation. This type of sequential 
response is nccc.s.sary to assure a predictable, safe system 
rc.sponsc during abnormal cnvironnicni.s. 
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As shown in Figure 39, the sealed covers of Region 1 
ol ihc firing sei arc noi on the same surface as the covers for 
Regions 2 and 3. This allows hoi and possibly conductive 
gases generated m Region 1 by an abnormal environment to 
escape without co mpromising the barriers between Region 1 
and Regions 2 or 3.^" 


j 



The firing set housing and detonator cable cover is 
fabricated from nbcrglass-rcinforccd.compression-moldcd 
MXB-71. MXB-7I is fire-resistant with cxecilent diciccuie 
sircngiJi properties for temperatures up to 3(X)®C. The open¬ 
ings in die harriers lor the functional stronglink switch con¬ 
tacts and ncccssar)' openings into Regions 2 and 3 for test or 


reset of the MC2935S arc sealed with high-temperature sili¬ 
cone. The metal mounting screws for the stronglink switches 
arc through the container wall and arc similarly closed from 
the exterior of the firing set by plugs of MXB-71 scaled with 
the same silicone. 

To assure protection of the firing set exclusion regions 
by the su-onglink switches, the contact assembly of each 
switch is constructed of metal and ceramic parts. The free 
volume is minimized to avoid bridging between input and 
output con tacts by unintended conductive paths during abnor¬ 
mal thermal and crush environments. The switch housings are 
made of high-strength stainless steel to resist deformation in 
crush environments. The MC2969 and MC2935 can each 
withstand at least 1600 V dc at temperatures up to 400''C. 
Both switches contain discriminator mechanisms that, upon 
receiving an incorrect input signal, lock the switch in the open 
position. The MC2969 is resettable, requiring a pulse of 
correct length and amplitude to return the discriminator 
mechanism to its initial stale. To be reset, the MC2935 
requires both a manual rclca.se and a .specific electrical signal 
input. Because physical access to the firing set i.s required, this 
procedure can only be done at a DOB manufacturing facility. 
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MC Requirements 

Normal Environments 

The Bf) I-6,8 military characicrisiics .slate: 

‘‘TIic probability (per bomb lifetime) of a premature nuclear 
detonation for the normal environments described in the STS 
shall not exceed: 

1. Prior to preann (which includes application of 
the arming power and the unique intent enabling stimu¬ 
lus) and prior to release from the aircraft and in the 
absence of the trajectory stimulus, 1 x 10 ^ 

2. After prearm and prior to rclea.sc from the air¬ 
craft, and in the absence of trajectory stimulus, 

I X 10'^ 

3. A ficr prearm and after release from the aircraft, 
and in the absence of the u-ajcctory stimulus, 

1 X \0r\ 

The probability (per occurrence) of a nuclear detonation in 
the normal release envelope after receipt of the trajectory 
stimulus shall not exceed: 

1. Prior to expiration of the safe separation time, 
I X \Q\ 

2. After expiration of the .safe .separation time and 
prior to the intended detonation. 1 x 10 


Abnormal Environments 

The military characteristics for the B6l-6,8 state: 
‘‘The probability (per occurrence) of a nuclear detonation of 
a bomb for individual or credible combinations of abnormal 
environments specified in the STS shall not exceed: 

1. In the absence of any unique^inieni and trajec¬ 
tory stimuli, 1x10^. 

2. After receipt of the unique intent and in the 
absence of the uajeciory stimulus, 1 x 10 \ 

3. Placing the normal/ovcrridc switch in the over¬ 
ride position shall be cons idered in tent enabling stim u- 

lus.” 

Safety Subsystems 

Fault tree analysis techniques are useful for defining 
and evaluating the nuclear safety design of the bomb system. 
Figures40 through 43 arcabbrcviaicd examples of fault trees. 
These figures illusu-aic the three safely subsystems incorpo¬ 
rated in the B61 -6,8 to meet nuclear detonation safety require¬ 
ments in normal and abnormal environments. Both DOF 
(Sandia, Los Alamo.s, and production agencies) and Dot) 
requirements are addressed. 



Normal Env: <l in 1000 
Abnormal Env: no req’t 


Normal Env: <! in 1000 
Abnormal Env: <l in 1000 


Normal Env; <1 in 1(XX) 
Abnormal Env: <1 in 1000 


Fii»ure 40. f'auli I’rco, Loss of Flecirical System Safety 
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Arming Safety Subsystem 

The arm ing subsystem, when combined with the inieni 
and trajectory subsystems, provides the additional lx 10'^ 
nuclear detonation safety to achieve the MC requirements in 
normal environments. No abnormal-environment nuclear 
detonation safety requirements are placed on this subsystem. 
This subsystem prevents the application of normal environ¬ 
ment aircraft and bomb electrical system signals to critical 
circuits. Electrical signals at the bomb umbilical and prcflighi 
controller connectors are restricted to prescribed PAL or 
sironglink monitor signals from the aircraft or T-gcar. 

The component assemblies included in the arming 
subsystem arc the MC2213(A) Actuator and PuLsc Battery 
Assembly, the MC2238A/B Pulse Baiicrics. the MC36.S6 


Main Batteries, MC4138 Programmer,and the MC4140ICU. 
The delivery option selection circuitry and the ICU software 
provide positive control of the output of the pulse baiicncs. 
Premature actuation of a pulse battery will result in system 
“shutdown” without the required aircraft delivery option 
voltage being present. Premature of the main battery will 
similarly result in system “shutdown” by the programmer. 
Both premature actuation of the pulse battery and aircrali 
prearm power must occur for the ICU and programmer to 
function in the intended use mode. Fortlicarming safety suh- 
sysiem, the DoD must insure that prearm dc-power is mu ap¬ 
plied to the umbilical connector. The DOE will insure the 
comptmcnis involved meet the design requirement.s. 
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Intent Safety Subsystem 

As shown in figure 42, both the DoD and DOE musl 
meet rcquircmcnis for ihc Inlcni Safely Subsystem lo provide 
assured nuclear dcionaiion safely. The DOE mu.sl assure ihal 
ihc MC2969ISLS in the firing set meets the isolation require¬ 
ments and is only enabled upon the applicauon of the lUQS. 
The DoD musl assure that ihe lUQS signal is not generated 
prematurely due either to inadvertent or inappropriate human 
action or hardware malfunction of the lUQS generator in the 
am AC. Both DOE and DoD must meet lhc.se requirements 
in the event of an abnormal environment. 


If the MC3()25 Signal Selector is in the OVERRIDE 
position, there arc no requirements of the intent safety 
subsystem to provide protection in an abnormal environment. 
With the selector in OVERRIDE, the bomb will meet only a 
1 X 10^’ probability of a nuclear detonation in an abnormal 
environment Additionally. 1 x 10’ probability of a nuclear 
detonation can only be met in the absence of the trajectory 
stimulus.” 



|.-igure 42. Fault free. 1 Subsystem Safely 
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Figure 43. FauU Tree. Los.s ofTrujeaory Subsystem Safety 


Trajectory Safety Subsystem 

Of the three nuclear safely subsystems, armings inicni, 
and trajectory, only the trajectory safety subsystem is com¬ 
posed entirely of DOE hardware. The DoD responsibility is 
to assure that no accidental simulation of the “intended use” 
environment (rciardatipn or spin) occurs. Major components 
within this safety subsystem arc the MC4175 TSSG or the 
MC4137 TSSG and the MC2935 Trajectory Strong-Link 
Switch in the firing set. The MC4175 TSSG i.s identical to the 
MC3640 TSSG (B61-7) except for a connector change and 
will support B61 -6 production for the first six months until the 
MC4137TSSG is available. 

MC4175 

The MC4175 TSSG is a .second-generation design of 
U'ajeciory sensing devices incorporated into B6I bombs to 
enable (close) the MC2935. In the mi‘d-70\s. the MC2948 
TSSG was designed for first use in the B61 -5 and was later 
used on the B61 -3,4. Both the MC2948 TSSG and MC4175 
TSSG u.se“stronglink/wcak-link”dcsign philo.sophy to achieve 
nuclear .safety in abnormal environments. The normally open, 
acceleration-sensing rolamilc switches (.sironglinks) inter¬ 
rupt electrical power from the TSSG electronics that generate 
the trajectory unique signal (TUQ^)* application of 
power through the inertial rolamilc .switches to the electronics 


will prcKluccthcTUQS to drive the MC2935. Thus the design 
theme requires that the TSSG rolamitc switches (stronglinks) 
be capable of surviving, without shorting, higher levels of 
shcKk or temperatures produced by an accident environment 
than the TUQS-producing elecironics/ceramic circuit board 
(weak-link). Failure of the stronglinks in severe environ¬ 
ments is acceptable, but only if the weak-link also fails 
irreversibly. 

Figure 44 is a simplified block diagram of the iraicc* 
lory safety subsystem with the MC4175 TSSG which illus¬ 
trates the ciccuical connection for both the parachute retarded 
and spin-stabilized frccfall delivery modes of the bomb 
Functional contacts of the MC2969 IntcniSirong-Link Switch 
arc required to be closed before the TUQS can drive the 
MC2935. Both the intent and trajectory safety .subsystems arc 
dc.signcd to meet a goal of 10 ^ given an abnormal environ 
ment; each is considered to be independent and no conu-ibu- 
lion to the trajectory safety subsystem because of the interrup¬ 
tion of the MC2935 drive lines by the MC2969 is assumed. In 
the spin-stabilized bombdclivcry mode,one radially oriented 
rolamilc switch in citch of the two TSSGs must close before 
the scncscircuitiscloscd between the bomb power source ami 
the TUQS-producing electronics. The two MC4175 TSSGs 
are mounicxl opposed to each other equidistance from the 
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Figure 44. Block Diagram,Trajectory Safety Subsystem 
with MC4175TSSG 

bomb’s longitudinal center line so thata radial acceleration or 
deceleration may cause both of the radial ly-mountcd rolam iies 
in one TSSG to close, but the spin rolamiics in the opposite 
TSSG will remain reset. Spinning of the bomb is required to 
close all four spin rolamitcs. 

Numcrous shock tests of the MC3671 (spin) and the 
MC3672 (retard) rolamiics have revealed the MC3671 to be 
most susceptible to shock: 4(XX)g, 1 ms when the direction of 
the shock causes the rollers to travel from the rose tend (resting 
end) to the actuate end. The heavier rollers of the MC3671 
travel to the actuate end with sufficient vckx:iiy/cncrgy to 
separate the end cap from the ease. In all other directions the 
MC367I is 6000g’s or greater, as is the MC3672 in all 
directions, including the actuate direction. 

By design, the ceramic printed wiring board for the 
TUQS electronics Is the weak -link for the MC4175 TSSG in 
the shock environment. The two-sided bonding of the DAP 
rolamiics to the mica housing of the MC4175 TSSG insures 
minimum failure levels of approximately 6(XX)g s. Whereas 
shocks perpendicular to the ceramic board result in breakage 
at as low as 3 30g, shocks in the plane of the board do not result 
in predictable failures (fracture). Abnormal environment 
testing of the ceramic boards have shown boards to survive 
~7000g’s in the plane of the board (undesirable since the 
stronglink rolamiics can fail at lower levels). However in no 
system test nor componcni-lcvcl testing of complete MC3640 
TSSGs for the B61-7 did there exist an "unsiife” condition. 
Some abnormal environment tests have resulted in damaged 
rolamiics ancl/or lack of adlicsion to the exclusion region 
barrier and an undamaged circuit board, but none exhibited a 
shoricircuil ihaicould iransmii power to dieclccironics. With 
the actuate contacis on one end of the rolaniiie, bypass 


requires the band or roller to remain at the 
actuate end. None of die damaged rolamiics 
exhibited a potential for liiat condition. 

Two polycaibonaie capacitors, essen¬ 
tial components for the gcncralion of the 
TUQS, arc used as the thermal weak-Unk. 
Both the DAP rolam itc and the glass-bonded 
mica housing of the MC4175 TSSG retain 
excellent electrical insulativc propeaies to 
the structural limit of the materials in high 
thermal environments. With a repeatable 
and irreversible failure temperature of 350"^ 
to 400®F, the polycarbonate capacitors will 
fail long before bypass of the rolamiics or the 
housing is possible. 

It is important to note that “trajectory 
sensing” implies the parachute was deployed 
and the resultant retardation forces were suf¬ 
ficient to close the rolamiie switch of the 
bomb spin rale is adequate to close similar, radially oriented 
rolamiic switches. No discrimination capability between an 
‘‘intended use” and a “trajectory” resulting from an accident 
is possible. Any airborne accident can rc.sult in damage to the 
bomb tail section and resultant parachute deployment or 
adequate spin rates developing due to ihc bomb fin cant nec¬ 
essary to maintain roll rate for accuracy in frccfall deliveries. 

MC4137 TSSG 

Where the MC4175 depends solely on the stronglink/ 
weak-link design philosophy, the MC4137 also incorporates 
“intent-enablement” as a safety enhancement. The “intent- 
enabled” design of the MC4137 requires the MC4137 TSSG 
electronics to “store” the lUQS signal which enables the 
MC2969 Intent Strong Link S wirch in the firing set during the 
prcaiming of the bomb before aircraft release. The TUQS 
signal is noi“slorcd”in the MC4137 electronics. Without the 
information content of the lUQS signal, the MC4137 cannot 
formulate ihcTUQS signal. The strong link/wcak-link pack¬ 
aging of the TSSG is also retained since the “intent-enable¬ 
ment” is a nuclear safety “enhancement.” The trajectory 
safety subsystem is required to provide 1x10 '^protection in 
abnormal and normal environments requiring independence 
of the three safely subsystems. The strong link/weak-link 
packagingof ihcTSSG will bcaddrc.sscd during development 
asrigorously as would be required if ihcTUQS were‘"stored.” 

To improve ihepackagingforabnormal environments, 
both channels of the MC4137 are packaged in a single steel/ 
aluminum enclosure (Figures 18 and 45). Conductive hous¬ 
ing and barriers of steel arc used to maintain mechanical 
integrity in abnormal environments. The .steel housing, exclu¬ 
sion region barriers,and rolamiics arcclcciricaily conductive 
and designed to divert unintended, accident-induced energy 
to ground. Isolation of all signals from the ease is required in 
normal environments for reliability. 
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Kij»ure 45. Block Diagram, Trajectory Safety Subsystem 
with MC4137TSSG 

Both of the new rolamitcs in development (MC4146 to 
sense bomb spin and MC4147 for retarded drops) arc siccb 
ease, hermetically scaled assemblies. As in the MC4175, 
there are two spin rolamitcs per channel connected in series, 

. diametrically opposed in the bomb to require true spin of the 
bomb. Previous rolamiie designs have been constructed of 
insulativc materials with the conductive band as the signal 
(power) path between the actuate contacLs. The new rolamitcs 
are designed for increased ruggedness and predictability in 
abnormal high shock environments. The steel rolamitcs and 
TSSG housing.(exclusion region barrier) will each incorpo¬ 
rate mechanical mounting features that will insure integrity of 
the rolamitc/barrier union through all abnormal environ- 
menLs. This design will result in the rolamiie case electrically 
grounded to the housing (system ground). Therefore the 
contact block in the roller is required to be isolated from the 
roller and the band. Therequired electrical path is through the 
pins and the contact block (see Chapter 2), 

In the block diagram (Figure 45) shown above, the 
exclusion region encompasses the rolamitcs, wcak-link ROM, 
and circuitry necessary to interface with the SA3331-6 
microprocessor. Each “intent board” is packaged outside the 
exclusion region and contains the aircraft interface circuitry, 
microprocessor, and TUQS drive circuits. To format the 
TUQS signal, each independent channel of the MC4137 
TSSG (an intent board and a U’aji.'ciorv' Ix'iard plus three 
rolamitcs) will combine the information from the lUQS signal 
stored in die microprocessor wilh 24 bits stored in a thermal 


wcak-link ROM (read only memory). Low melt alloy loops 
on a printed circuit board (Figure 18) form the 24 bits of the 
wcak-link ROM. Melting ofihc'Moops” in high temperatures 
from abnormal environments will result in cither opening or 
shorting to the board. Either aJlcmaiive is “safe”: combining 
with the lUQS signal would lock up the MC2935TSLS. Early 
thermal testing of thcTSSG has recently led to redesign of the 
housing and wciik-link ROM to mount the ROM to the outer 
wall of housing. An instrumented unit with representative 
rolamitcs and housing indicated the wcak-link ROM would 
reach guaranteed failure temperature as the rolamitc tempera¬ 
ture was approaching its design temperature limit of SOO'^F, 
with the ROM mounted on the ceramic board. Mounting of 
. the ROM near the outer TSSG wall resulted in considerable 
margin. 

An additional nuclear safely enhancement achieved in 
the design of the MC4137 TSSG is the use of “volatile” 
memory (without power the lUQS code will be lost) to store 
the lUQS code during the prearm of the bomb. A permanent 
memory (“non-volatile”) would require certification o( the 
erasure of the lUQS after in-proccss, acceptance, and system 
level testing. On a “first principles” basis, the incorporation 
of the “volatile” memory is most attractive and defensible 
from a nuclear detonation safety standpoint. Capacitive, 
“hold up” energy storage in the MC4137 will assure that the 
IIJQS is retained for a minimum of 7 seconds in the event of 
an intermittent aircraft power dropout. If all arming power 
and monitor power is lo.si for longer ilian 7 seconds minimum 
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(-2 minuics maxiiiuiin), ihc MC4137 will intcrrupi ihc arm 
moiiiiorlinccoilic AMAC. On NavySystcm I aircrari(A-7E 
and E/A-IS). diis will result in both die “ann" light and the 
Side light being illuminated when |X)wer returns. On the 
I SA aircraft, die “di.sagrccmcnt” light will illuminate when 
power returns. The rcapplicalion of arm power in this situ¬ 
ation will cause the MC4137 to erase the lUQS memory 
IcK-ations diereby ensuring a “safe" state. A power dropout 
longcnoughtocau.se this condition will require the pi lot to re¬ 
transmit the lUQS and again “am” the TSSG. Power 
dropouts of shorter duration will not affect the AMAC indica¬ 
tions until after the MC2213 capacitive network has dis¬ 
charged (or cause additional, pilot workload). The u.sc of 
“volatile" memory for lUQS retention is a desirable nuclear 
safety design feature. 


Although the B61-6,8 MCsonly require compatibility 
with Navy strike aircraft, the MC4137TSSG will be designed 
to be compatible with all aircraft approved for carriage of any 
B61. Since some aircraft (e.g., B-IB and B-52 CSRL) 

interrupt prearm powerafter sending the lUQS for undefined, 

extensive Ume intervals, the MC4137 will use “safe monitor” 


pow'cr to hold up the volatile nicmory. Only microamperes 
of current is necessary for hold up and all required bomb 
impedances arc maintained. Additionally, all aircraft li.sicd in 
the B9() MCs will be tested forcompaiibility during dcvciop- 
incnt for future application of (he MC4137. 

After release from the aircraft and rise of the bomb 
pul.se batteries, the MC4137 will use the closed rolamite con¬ 
tacts (either the single retard or the two spin rolamitc.s) to 
obtain the pattern stored in the wcak-link ROM. Onc-by-onc 
each of the 24 ROM bits is obtained and “cxclusivc-OR’cd" 
with the corresponding bit of lUQS and transmitted to the 
MC2935 TSLS in the firing .set. Each bit is obtained from the 
ROM consistent with the TUQS pulse constraints. Premature 
closure or opening of the rolamites will indicate an abnormal, 
oraccidcntenvironmcntand result in iransmitial of an incor¬ 
rect TUQS code and locking up the MC2935 TSLS. 


i 
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Analyses and Tests 

The “individual or credible combinations” of abnor¬ 
mal environments to which the B61-6,8 may be subjected 
throughout the STS arc: impact, crushing, puncture, thermal, 
unintended electrical sources, lightning, and chemical im¬ 
mersion. The bomb is designed to have a safe rcspon.se in 
thc,sc abnormal environmenus, even in the presence of acti¬ 
vated battery power sources within the bomb. Similarly, 
clccuical signals (except the unique signals) from external 
sources can beapplied anywhere outside the exclusion region 
andthebombwillmecithcprcmaturercquircment. Analy.ses i 
anil/or tests will be performed on the B61 -6,8 where nece.s.sary 
lo confirm the design theme to each of the general cla.ssifica- I 
lion.s ol abnormal environments. Much of the abnormal en¬ 
vironment testing on the B61-3,4 is applicable to this pro- 
.gram. and a major reduction in the number of fulLscalc tests 


nccc.ssary to confirm the nuclear .safety design of the B61 -6 8 
was achieval. The following is a summary of the bomb 
rc.sponsc in each type of abnormal environment. 


Individual Abnormal Environments 
Impact 

Abnormal impact environments can be produced 
through aircraft or Uuck crashes and accidcnul dropping of 
the weapon. Maximum aircraft impact velocities of over 1500 
fps or mid-air collisions resulting in the bomb freefalling to 
earth at velocities of up to 1600 fps are possible. 

Design Theme. We require the stronglink/cxclusion 
region to remain intact and the stronglinks to remain in the 
reset (open) position until the HE-nuclear .system (weak-link 
for this environment) is nonfunctional. 






I 
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Crushing 


This cnvironmcni is a scmi-siaiic siuiaiion where, for 
example, during an accident a structural member of the 
aircraft comes to rest on the weapon ease. 


Design Theme. The MC2969 and MC2935 stronglink 
switches arc required to hold off any energy reaching the fire 
set in this environment With the structural properties of the 
thick aluminum center case and the steel support sleeve 
serving to protect the exclusion region from direct exposure 
to the outside world in any credible static crush abnormal 
environment, no weak-link needs to he identified. 


Response Analy.sls/Te.sLs. le.sts conducted on the 
Bf>l-5 and the B6l-3,4. each with the identical center case 


(but with different suppon sleeve designs), showed almost 
linear deformation with applied load until ca.se rupture at 
3()5,(X)0 lbs and 335,000 lbs, respectively. In each test, 
loading was applied through a rigid 2-inch bar placed perpen¬ 
dicular to the longitudinal axis of the bomb over the firing .set. 
In accident possibilities for the B61 -6,8, the forces necessary 
to rupture the center case do not exi.st. For example, a fully 
loaded B-52 weighing about 500,000 lbs could test at most 
one-half or 250.000 lbs on a B61-6.8. Maintaining the 
integrity of the center case, with the su^onglinks ensuring 
electrical isolation to the practical limit of the environment, 
assures meeting the 1 in 10* safety requirement. 


Thermal 

Complete or partial bomb engulfment by a JP-scncs 
kerosene (jet fuel) fire is possible. Fuel supplies are assumed 
to be sufficient to allow all processes to run to completion. 


Design Theme. In abnormal thermal environments, 
predictable nuclear safety is accomplished by stronglink/ 
weak-link colocation within an exclusion region whose har¬ 
riers primarily consist of a high-temperature insulation mate¬ 
rial. MXB-71,and ceramic dielectric in the su-onglink switches. 

The applicable wcak-links arc the X-unit capacitor and the 
nuclear system high explosive and detonators. 


One B61 -6.8 system test is being planned. A nose-on 
impact te.st at a velocity ( to be determined) greater than the 
last B61-7 test (328 fps) and le.ss than 492 fps will be 
conducted to confirm the exuapolations made on the B61 -7 
test This test unit may also be u.scd to investigate the effect 
of combined abnormal environments (thermal followed by 
impact). 

Of the new components in development to suppon the 
861 -6,8, only the MC4137 TSSG has abnormal environment 
requiremenLs. The weak-link ROM will be characterized in 
shock on both component-level testing and system tests where 
appropriate. 


Respon.se Analysis/Tests. Tests demonstrating .safe 
response in abnormal thermal environments conducted dur¬ 
ing the B61-3,4 program included the following: 

• High-temperature tests on switches and barriers un 
to I000°F 

• High-temperature tests on weak-links (capacitors 
and IHE) to determine failure threshold 

• High-temperature tests on 12 firing sets at tempera¬ 
tures up to 1850''F 

• High-temperature tc.sts on four B61 -3.4 te.st unit.s. 


The mechanical packaging and therefore the themial 
properties of the B61 -6,8 is identical tothai of the B61 -7. _ 


E_ 


4-- 


. _,Thc tc.st unit 
was ccTnfiguredto provide ex posure of a 120° arc of the center 

casedircctly to the fire with the remaining portion of the bomb 

exterior insulated and protected from direct flames. In this 
way, the most preferential heat path to the stronglink switches 
is obtained and therefore a worst-ease tc.st resulLs. The 
thcnnocouple data (Figure 46) indicated the desired close 
thermal-tracking of the stronglink and weak-link tempera¬ 
tures. Thermocouples within the IHE indicated that in ihis 
orienuition the I HE starts burning before the X-unit capacitor 
reaches failure temperature. The bomb IHE was toully 
consumed in the fire without detonating. Posticst c.xamina 
tion of the firing set revealed total thcnnal destruction of die 
mylar X-unii cipacitor while the stronglinks retained voluicc 
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Figure 46. Thermocouple Daui From B61-6,8 Fire Test 


sLandoff capabilities to requirement levels. 

Because of the applicability of the B61-7 test de¬ 
scribed, no bomb-level thermal verincaiion test of the B61- 
6,8 is planned. Thermal testing of the MC4137 TSSG will be 
performed to verify the response of the weak-1 ink ROM and 
establish the adequacy of the 500°F limit on the new steel 
rolamites. 

Puncture 

Puncture of the bomb by projcctilcs/fragmcnis could 
create conductive paths that do not exist in normal environ¬ 
ments. 


Design Theme, The slronglink switches arc located in 
the inner region of the bomb cross-section. Surroundingcom- 
poncnis and materials afford ph ysical protection of L hcs:wiichc.^ 
and exclusion region h airieijs.r . . _ 



The 


use of 


multiple arming signals further assures prcdiciablc nuclear 
detonation safety in this environment. 


Respon.se Analysis. High-kinetic energy fragments 
fan penetrate the bomb center ease, the steel sleeve, and the 

tiring set housing. If the fragmentsdamage the wcak-hnks U) 
such an extent dialthc nuclear system is rendered inoperable, 


nuclear safety is a.ssurcd. regardless of bypass paths. If the 
fragments merely leave holes in the ease, no arming occurs. If 
the fragments cause conductive paths into the exclusion 
regions, it would be expected that these paths w'ould be 
shorted to either or both the conductive center ease or the 
conductive inner ease and thus shunted away from critical 
arming circuits. In order to constitute a threat, a scries of 
unlikely conditions must occur: the fragment must provide 
coniinuou.s conductive paths from power sources to critical 
circuiLs within exclusion Region 3: the paths must be insu¬ 
lated from the center ease and steel sleeve that the fragment 
pcnciraicd; and during the penetration, the fragment must not 
destroy the wcak-links(X-unitcapaciior,dctonators,orIHE). 
IiisbclicvcdthcsesimuliancousoccLirrcnccsarc notcrcdiblc. 

Unintended Electrical Sources 

In all abnormal environments, the presence of electri¬ 
cal power is a.ssumcd to be present. Electrical power on the 
drive lines to the slronglink switches would threaten the 
nuclear safety design if the sironglinks could be enabled 
(closed) by “ordinary” electrical signals. 

Design Theme, fnad venom elecirical signals arc pre- 
vcnicd from arming the warhead through i.^idation provided 
by the c.xchjsion region barriers and slronglink switches that 
rcs(>r>rul only K^a unique paiicm of signals. 
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Chemical/Immersion 
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Response Analysis. The ncccssiiry informaiion con- 
icni of ihc unique signal pattern discriminated by lx)lh the 
MC2%9 [nicnl Slronglink Switch and the MC293S Trajec¬ 
tory Stronglink Switch were selected to obtain a suitably 
small probability of inadvertent generation of the unique 
signal patterns by extraneous signal sources. 

The probability of a random signal formal driving the 
MC2969 or MC2935 to a closed position has been calculated. 
Safely-conservative assumptions arc that an extraneous sig¬ 
nal source produces only pulses of the required format (i.e., 
amplitude and pulse width), in the proper ratio of events, that 
arc pairwise dependent, and arc applied to the proper lines. 
The MC2935 is a single-try switch with a unique signal 
pattern of 20 pulses on two lines while the MC2969 is a 
multiple-try device with one drive line requiring a specific 
pattern of 47 long and short pulses. Calculations show the 
probability of enabling the MC2935 is about I in 10^ as 
compared to the requirement of 1 in 10 \ The probability of 
unlocking the MC2969 is 6.0 x 10’’ on ihe first try while all 
subsequent trials are 1.6 x lO’®. Over a year of trials (millions) 
can be tolerated and still meet the 10 ^ probability require¬ 
ment. 

Lightning 

Design Theme. Lightning protection for the B61 -6,8 
is provided by enclosing safciy-criiical firing set and detona¬ 
tor circuits within a conductive center ease and cover. The 
only points of entry into the center ease arc through a LAC in 
the cover plate and the radar cable from the nose. The radar 
cable entering the center case is protected by the conductive 
radar housing. 

Response Analysis. The LAC is designed to function 
as a normal connector for operational signals but provide a 
preferential breakdown path to the center ease for lightning 
energy present at the case entry point. The LAC wilI limit the 
voltage within the center case to a maximum of 1400 V, while 
the slronglink switches and exclusion region barriers main¬ 
tain safety-critical isolation of at least 1600 V at 400®C and 
2600 V or higher at icmperaiurcs of -55°C to +75X. Safely 
in the lightning environment depends primarily on assuring 
that the LAC breakdown characteristics arc conu-ollcd so that 
all LACs breakdown to the ease before the voltage holdoff 
capability of the su-onglink switches is exceeded. Each and 
every pin of every LAC is tested to confirm that the break¬ 
down voltage criterion is met. Sample units from each lot of 
stronglink switches are destructively tested to assure that die 
lolconforms to abnormal environment requirements, includ¬ 
ing breakdown voltage at room and elevated temperatures. 
Reference 31 concludes that the I x 10^ probability is met 
even if units rejected by the screens arc included in the 
population. 


Response Analysis. Because the center case Is con¬ 
ductive, it is not credible to assume that electrical energy 
could be applied to the electrical system in the presence of a 
conductive fluid which could b>^ass the stronglink switches 
and simultaneously maintain isolation from iherbomb ease 
(clccu-ical ground). 


(n)m 
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Combined Abnormal Environments 

I he B61-6.8 MCs require nuclear delonatioii.Siifciy In: 
achievetl for individual or credible combinations of abnor¬ 
mal environmcnt.s.specified in the STS.” Theapplicable STS 
for the B61 -6.8 has been di.stribuled for comments and revi¬ 
sion. Hie .section defining credible combined abnormal 
environments Ls being di.scu.s.se<l and a revision has (Ken 
propo.scd. Therefore the specific STS guidance to wliich the 
design andevaluation program for the B6I-6,8 will be judged 
is not available. 

The bombs response to combinations of abnormal en¬ 
vironments relics on the dcmonsu-aied safe respon.se to indi¬ 
vidual abnormal environments by virtue of the stronglink/ 
wcak-lmk/exclusion region design concept For all single 
abnormal environments identified in the STS, it has.or will be 
.shown that either the wcak-link elements of the nuclear 
system or firing set (>ccome irreversibly inoperable prior to 
the stronglink failure, or the stronglinks maintain electrical 
isolation. Additionally, the relative stronglink/wcak-link 
failure levels arc sufficiently separated so that an abnormal 
environment not severe enough to disable the weak-link is 
below tbc level necessary to degrade the suonglink/c-xclusion 
region isolation. Thus, there arc two predictably stife re- 

spon.scs loan abnormal environment thalhavcadircct bearing 

on system response to sequential exposure to abnormal cn vf- 
ronmonis: 

1. The weak-link has become irreversibly inoperable 
prior to stronglink failure or bypass. 

2. The stronglinks remain intact (the weak-link has 
not failed). 

Given response # 1. bomb exposure to subsequent ab¬ 
normal environments would not result in a nuclear detonation 
since die system was rendered inoperable by the initial expo¬ 
sure. 

Given response #2, the bomb is expected to wiihsuind 
additional abnormal environments terminating in a safe con¬ 
dition w ith cither the stronglinks intactor with the weak-link 
inoperable prior to stronglink failure or bypass. 


There has never been a entire bomb system exposed to 
an ordered sequence of abnormal environmcnis. There has 
been abnormal environment testing performed at the major 
component level (c.g., die firing set) to identify potential 
problem areas. Numerous tests have been performed on the 
MC29I8 Firing Set to establish structural propenies and 
dielectric properties of the stronglinK/exciusion region fol¬ 
lowing a high thermal abnormal environment. There are 
development activities in progress to improve the structural 
suppon of the stronglink switches following elevated tem¬ 
peratures resulting from fire and there fore address acombined 
abnormal environment of high thermal followed by shock. 
An aircraft crash (shock, static loading of the case) followed 
by fire is a “more credible” order of die combined environ¬ 
ments and one for which the firing set response is predictably 
safe. 

There arc plans to test the new MC4137 TS SG to com¬ 
bined shock and thermal tests. The steel case (exclusion 
region) and rolamiics were selected based on the threat of 
combined abnormal environments. The sequence of the 
thermal and shock should po.se no threat to the predictability 
of the all-siccl design. 
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Summary 

The rcliabilityof the B61 -6.8 has Ixx-n pralicicd usin« 
jhfi methods {?riQfly jjcscri^d jn jhis chan(cr. | / 

^ prcdici Ihc bomb reliability’ a 
allure analysis is performed for each componcni. Current as¬ 
sessment are used for the componenus of the parent weapon 
or those that arc common to the B61 -7 or B61 -3,4 based upon 
stockpile data. Predictions for new components arc ba.sed on 
all available data from similar component.s in comparable 
wcajxjn systems and on data for individual piece parts and 
dicir design use. 


5. Reliability 

Conclusions 



1. Stockpile and use environments will be no more 
severe than the normal logisucal and operational environ¬ 
ments desenbed in the STS. 

2. All AMAC inputs will be present and proper. 

3. There will be no human errors in bomb handling or 
preparation for use that will reduce its reliability. 

ih,. ^'i 

s of production and prtKcss control, 

n,. , ^11 end-of-life of limited-life compo- 

nents will not be exceeded. Reliability a.s.ses.sments arc 

considered loapplyatthccnd of .spccincd-lifcforlimited-lifc 

components. 

6. Failure events not treated otherwise arc mutually 

exclusive or staiisucally independent. 


vHK. 
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6. Use Control 


The B6I -6,8 use control features include a command 
disiible system and a Category D PAL System. Additional 
details about these features arc discussed in the Use Control 
Addendum for the B6I-6.8 Bomb (Reference 37). 

Command Disable System 

Command disablement of the B6I -6,8 can be initiated 
from the a^ft or at the prcBight controller (Figure 23) on 
thcbomb.l _— ( 

disablement sysimTscomp^ ol a DEI002 Coded“De3re^ ‘ 
and a MC3246A Thermal Battery. 

Disablement results when (!) the correct three-digit 
disablement code is set on the DE1002 Code Switches. (2) the 
function select switch is set to the D1 (disable) position, and 
(3) the T-handle is extracted, mechanically initiating the/ 
MC3246A battery. The disablement loads located within the I 
bomb center ease, each isolated by discreet resistors within 1 
the MC4 1 V) Junction Box, arc in parallel off the output of the • 
MC3246A baiicry. , 


Category D PAL 

^ PALsubsysicmconsisisofan 
MC2907A MultipleCodcCodcd Switch (MCCS) an MC2946 
Output Switch, and a PAL Regulator. When the subsystem is 
locked, the bomb cannot be prearmed. Tlic PAL subsystem is 
shown schematically in Figure 47. 

MC2 907A Multiple Code Coded Switch 
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MC2946 Output Switch 

The MCCS utilizes the MC2946 Output Switch to 
provide [X)siu VC control of selected bomb prearming signals. 
Whenever the MC2946 is unlocked, the PAL unlock monitor 
w i 11 be sw itched to system return. This monitor alio ws a PAL- 
capable AM AC or ground control equipment to verify that the 
PAL is, or is not, locked. The functional and monitor contacts 
arc mechanically interlocked to ensure agreement of contact 
position. 

PALOperations 


T436 and T436B Power Supplies 

ThcT436 and T436B (Figure 48) arc power supplies 
(28 V Ni-Cd baucries) that can be used with the T1535 

T1536.TI539,T1555.orT1563 PALConLrollcrs. ‘ ' 


T431A Charger Monitor 

The T431A icslcr charges and monitors ihc T436B 
Power Supply. 


CT1495 Adapter 

Th is adapter is used wiihthcCT1478 Cable to connee t 

the T436 Power Supply to the T1535,T1536.T1539,T1555, 

or T1563 PAL Controllers. 


The lock/un lock/rccode PAL operations can be per¬ 
formed on the B61 -6,8 at the bomb/aircraft interface connec¬ 
tor or through the PAL connector on the prcflight controller. 

Category D PAL Control 
Equipment 


^.^15,28 AdapleL. 










T304C Continuity Test Set 

The T3(MC monitors the state of the MC2946 Output 
Switch (opon/closcd). It contains a manually-operated gen¬ 
erator and therefore requires no additional power supply. 


T1535 Portable Decoder 

The T1535” is a ground decoder for Category D and F 
PA Ls. It operates with a T4 36B Power Supply and it can lock 



Figure 48. r436B Power Supply Connoctod to T15'!ri 
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Figure 49. T1535 Portable Decoder 

or unlock ihc B61-6.8 PAL. When the portable decoder is of the PAL. The staiu.s of the limited try is also shown. The 

used for mixed and/or multiple loads, safe power must be code dials arc equipped with privacy covers for operation by 

provided to each weapon. In this operation, iheTl 535 can fur- a team with split knowledge of the code (Figure 50). 

nish sufficient input for 
several Category D 
wca|X)ns in parallel 
(Figure 49). 

T1536 Portable 
Recoder 

TheT1536” is 
a ground recodcr used 
to recode and code 
check the B6,1-6,8 
(only one bomb at a 
time can be recoded). 

The controller can 
change one code al a 
lime or all codes, and 
the PAL is always left 
locked after a recode 
operation. The codes 
can be checked with¬ 
out affecting the status 
















































Figure 51. T1539 Code Verifier 


T1539 Code Verifier 

This verifier is used by a code verificaiion tc.am lo 
check Lhac the propercodc(s) is (are) in each weapon. U docs 
noi have a lock, unlock, or recode capability. This verifier 
also hiLS privacy covers for operation by a team with split 
knowledge of the code (Figure 51), 


IT 


T1542 Adapter 



T1549A Decoder Programmer 

This programmer is an item of PAL control equipment 
that can be used for test and training purposes in conjunction 
wiih ground and aircraft decoder controllers. 

The T1549A will perform two functions when con¬ 
nected lo a controller. The first function is to perform a 
duration and amplitude check of the aircraft and ground 
controller output data and power circuits for Category D 
systems. The second is to function as a coded switch simula¬ 
tor so that u-aining in decoding operations can be performed 
with the T1549A and the aircraft and ground decoders. The 
T1549A will furnish feedback to the decoder that will allow 
the operator to determine whether an acceptable or unaccept¬ 
able response has occurred. For training operations, seven 
dirrorent fixed codes arc provided. Any of thc.sc codes will 
furnish OFF and/or LOCX and UNLCXK indications as 


:ii>pro(^ria(c. 


The CT1504 Cable, described below, connccLs the T1535 
Portable Decoder to theT1549A DcccKlcr Programmer. This 
cable, currently used with all Air Force ground controllers, is 
shielded lo afford EMR integrity in the range of 2 to 20() MH/.. 
No external or auxiliary power cables will be required since 
the T1549A will be powered via the ground rccodcr power 
(which uses the power cable) or aircraft safe power. 

T1555 Code Verifier 

The T1555 (Figure 52) is a code verifier that is 
intended as a replacement for the TI539 . Rcccxlc operation 
can also be performed. 

T1558 Adapter 

TheTl 558 adapter attaches to the T15 55 Ccxlc Veri ficr 
to convert it to a recoding device. 

T1563 Advanced PAL Controller and T1572 
Portable Data Module 

The T1563 Controller can function as a rccodcr/dc' 
coder for locking and unlocking the B6l -6,8 PAL. It is also 
capable of recoding the PAL in the appropriate software 
mode. It uses the same cables, adapters, and iK) wer supplie s 
as the T1535 Dcccxler and the T1536 Rerixler L 

^njhnkc ilun'l 535 doccxler, liic 
T1563 is not capable of unliKking miiUiplc vvcafXMis m 


































Figure 52, T1555 Code Verifier 
Figure S3. T1563 Advanced PAL Controller 
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parallel. Similarly, ii can only rcc(xlconc weapon ai a time in 
ihc rcccxlcr mcxlc (F-igure 53). 

I'hc T1563 wiis developed to ease the burden of the 
I^A c(xlc management, li offers the user a more effective and 
cfnciem means to accomplish secure code selection, inser¬ 
tion, and verification with functions such as no-knowledge 
rcccxic and automatic verify. It is compatible with all pres¬ 
ently fielded PAL weapons. Air Force and Army, and the 
software can be changed to support future PAL interfaces. It 
also has a communications port to allow the transfer of 
information to and from the T1565 Headquarters Code Proc¬ 
essor (HCP) using the T1572 Portable Data Module (PDM). 
It can be powered by a T436 battery or T1571A power supply. 
For ease of use, the T1563 is operator interact! ve and portable. 

The T1572 Portable Data Module contains encrypted 
Permissive Action Link (PAL) recode and verification data 
generated either by the T1563 Automated PAL Controller or 
the T1565 PAL Headquarters Equipment. TheT1572 is used 
as a mass storage device (nonvolatile read/write memory) to 
carry both recode and recode verification data (data is en¬ 
crypted) between the T1563 and the T1565; also, the T1572 
would be used by the T1565 to read Source Data PROMs (read 
only memories) generated by NSA coniaining encrypted 
recode data. The TI572 can also be used to interrogate the 
TI563 concerning previous weapon accc.ss. 


T1569 Adapter 

This adapter is used with theCTI5()4 Cable to connect 
ihcT1535,T1536.Tl539.T1555,orT1563 PAL Controllers 
to the B61-6,8 Pullout Connector. 

T1571 and T1571A Power Converters 

The T1571 Power Converter can replace the T436 and 
the T436B power supplies whenever standard ac power is 
available. T^e T1571A is compatible with European ac 
voltage and frequency. 

CT1478 Power Cable 

This cable connects either a T1535. Tl 536, T1539, or 
T1563 with the T436B Power Supply. 

CT1504 Controller Cable 

This cable is used with the T1569 Adapter to connect 
cither a T1535, T1536, T1539. T1555, or T1563 PAL Con¬ 
troller to the pullout connector. 

CT1505 Test Cable 

This cable is used with the T1569 Adapter to connect 
the T304C Continuity Test Set to the pullout connector to 
monitor the PAL. It will also mate directly with the J! PAL 
connector on the MC4136 Prcflighi Conu-olicr. 
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7. Type Units and Joint Test Assemblies 


General 

Ty;x: weapons arc non-war reserve, nonnuclear con- 
hcuraiions that arc designed and produced exclusively for 
lesiinc. Lrainjng.andcvaluaiion hy the DOEand DoD. DoD- 
ivfv weapon requirements arc deiennined by Field Com- 
niand/Dcfcnse Nuclear Agency and the using military service 
via coni iguraiion meetings with the DOE design and produc¬ 
tion agencies. DoD and DOE concurrence on the design is 
ohiaincd at these meetings. The B61 -6,8 JoiniTast Assembly 
(n*A) is a DOE-dcvcIoped and produced configuration based 
on LXJE/DoD requirements for use in the joint flight lest 
program. JTA configurations arc comprised of nonnuclear 
DOE war reserve weapon (WR) components and non-WR 
instrumentation that replaces part of the weapon system. The 
physical appcaranccand characteristics of JTAs approximate 
the WR configuration to the extent practicable. 

B61-6,8 Type Units 

Type 3 Loading, Handling, and Limited 
Maintenance Trainer 

rhe Type 3 Trainer allows realistic training for all 
authorized DoD operational maintenance except limit life 
component exchange (LLCE) procedures. ThcTypeS, shown 
in F igure 54, has the following characteristics: 

a. External dimensions, appearance, weight, and cen¬ 
ter of gravity arc the same as WR to the extent that trainer 
handling procedures do not differ from WR handling proce¬ 
dures. 

b. The Type 3 Trainer is unclassified and contains no 
ha/^dous materials. 

c. The Center Bomb Subassembly contains ballast 

d. A swiichablc PAL monitor interface presents a 


*l(x:kcd**or “unlocked” PAL monitor indication at both the 
pullout and prcflighi panel connectors. The unl(x:kcd PAL 
monitor occurs when the TA “Tens" switch is set to 10 on the 
MC4n6 Prcflighi Controller. All other positions of this 
switch provide a locked PAL monitor. Dccodc/rccoile capa¬ 
bilities are not provided. 

c. A fixed arm/siifc monitor interface presents a "safe" 
.status indication at the pullout connector. Arming and safmg 
capabilities arc not provided. ^ 


The Type 5 is marked as follows; 

1. Permanent marking stating INERT TYPE 3 with 
serial number at the forw ard end of the center ease in accor¬ 
dance with existing prtKcdurcs. 

2. Stenciled marking suiting B61-6 TT'PE with 
design agency part number, alteration number, and .serial 
number located immediately above the permanent marking. 

B61 -6 Type Trainers arc generated from ex isii ng 061 - 
OType 3 A Trainers, using rcLrofit kits shipped to the fickl for 
the conversion of existing u-aincrs. 



Figure 54. B61-6,8 Type 3 Trainer 
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Type3A Operation and MaintenanceTrainer 

The Type 3A Trainer allows realistic training for all 
auihon/cd DoD operational maintenance including LLCE 
procedures. The Type 3A, shown in Figure 55. has the 
following characteristics: 

a. Externa] dimensions, appearance, weight, and cen¬ 
ter of gravity arc the same as WR to the extent that irgincr 
handling procedures do not differ from WR handling proce¬ 
dures. 

h. The Type 3A Trainer isclassificdSRD, and contains 
no hazardous materials. 

c. T\\c center bomb subassembly contains a dummy 
secondary, a dummy primary', and all component decks with 
training components, cables, supports, pads and hardwiirc. 

d. A swiichabic PAL monitor interface prc.scnts a 
'•locked” or “unlocked” PAL monitor indication at both the 
pullout and prcflight panel connectors. The unlcKked PAL 
monitor occurs when the TA ’Tens” switch is set to 10 on the 
MC'4l.>6 Prcflight Controller. All other po.sitions of this 
switch provide a locked PAL monitor. Dccodc/rcc(xlc capa¬ 
bilities arc not provided. 

c. A fixed aim/safc monitor interface prc.scnts a “safe” 
status indication at the pullout connector. Arming and safing 
capabilities arc not provided. 

f. An MC4136 Preflight ControlIcr (Trainer) having a 
command di.sabic coded device simulator with resettable T- 
handlc is provided for command di.sabic training. All other 
controls on the prcHighi controller panel exhibit WR-Iikc 
manipulating capabilities. 

The Type 3A is marked as follows: 

1. Pcmiancni marking stating INERT TYPE 3 A with 
.serial number at the forward end of the center ease in accor¬ 
dance with existing prcKCdurcs. 

2. Stenciled marking .slating B61-6 TYPE 3A with 
design agency pan number, alteration number, and serial 
number located immediately above die permanent marking. 
B6I -6 Type 3 A Trainers arc generated from existing B6I-0 
Tvjx: 3A Trainers, using rciroru kits .shipped to die field for 
conversion of cxi.sling trainers. 


Type 3E Loading and Handling Trainer 

The Type 3E Trainer can be used for all loading and 
handling training in accordance with esiabli.shcd DoD proce¬ 
dures. Figure 56 illustrates the Type 3E configuration, which 
has the following characierisiics: 

a. External dimensions, appearance, weight, andxcn- 
icr of gravity arc the same as WR lo the extent that trainer 
handling procedures do not differ from WR handling proce¬ 
dures. 

b. The Type 3ETrainer is unclassified, and contains no 
hazardous matcriaLs. 

c. The parachute, spin rocket, gas generator, and all 
center ease compi^ncnts arc replaced by ballast. 

d. A switchablc PAL monitor interface presents a 
“locked” or “unlocked” PAL monitor indication at both the 
pullout and prcflight panel connectors. The unl(x:kcd PAL 
monitor occurs when the TA “Tens” switch is .set to 10 on the 
MC4136 Prcflight Controller. All other positions of this 
switch provide a lockcxl PAL monitor. Dccodc/recodc capa¬ 
bilities arc not provided. 

c. A fixcd arm/safe mon itor intcrfacc presents a ”safc” 
status indication at the pullout connector. Arming and safing 
capabilities arc not provided. 

f. An MC4136 Prcflight Controller (Trainer) having a 
command disable coded device simulator with rcsciiabic T- 
handlc is provided for command disable training. All other 
controls on the prcflight controller panel exhibit WR-likc 
manipulating capabilities. 

The Type 3E is marked as follows: 

1. Permanent marking stating INERT TYPE 3E with 
serial number at the forward end of the center ca.se in accor¬ 
dance with existing proccdurc.s. 

2. Stenciled marking slating B61-6 TYPE 3E with 
design agency part numbers, alteration numbc'.r. and serial 
number located immediately above the permanent marking. 

B61-6 Type 3E Trainers arc generated from cxi.sling 
B61 -0 Type 3E Trainers .using rciroru kil.sshippcd lolhc ndcl 
lor conversion o( existing i/ainors. 
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Fij»ure 56. B6I -6,8 Type 3E Trainer 


B61-6,8 EOD Trainer 

Explosive Ordn:incc Disposal (EOD) training will be 
provided with slide and viewgraph prc.scniaiion material 
along with non-hiazardous representauve components. The 
presentation niatcriai shows ail the classified, explosive, and 
hazardous material locations and idcniifyingfcaiuresofihc.se 
c(>inp\)ncnLS. 

Type 5A DOE Training and Evaluation Unit 

The B61 -6,8 Typo 5 A is a functional, nonnuclear DOE 

trainer provided forpiloiprcxluciion tool-made sample (TMS) 

oval nation, quality assurance training, and production engi¬ 
neering evaluation. TTc functional components are of WR 
quality The mcKk high explosive (IHE) and the simulated 
nuclear components arc accurate representations of a WR 
system fhe Type 5A will contain live explosive components 
(detonator, actuators, etc.). 


Type 5C DOE Training and Evaluation Unit 

The B61 -6,8 Typo 5C is a functional, nonnuclciir DOE 
trainer which only differs Irorn aTypc5B by the dummy nose 
rather than a functional radar nose. An early type 5C is 
planned which w'ill allow* the production plant to design 
production fixturing, writing a.sscmbly and inspection prcKC- 
durcs, and allow early training. 

Type 5D DOE JTA Training Unit 

The B61 -6,8 Type 5 D is a nonnuclear DOE JTA trainer 
with functional JTA components (MC4130, Energy Transfer 
Unit (ETU). Monitors, and CF cables). The Type 5D is 
configured for the JTA I (Irecfallair)connguraijon wiihakii 
that will enable it to bo reconfigured to the JTA 2 (laydown). 
This trainer provides the production plant opportunity to 
Hnalize tooling, gauging, icsicrs, and assembly and inspec¬ 
tion standards prior to the a.s.scmbly of the first NMFT. 


‘ Type 5B DOE Training and NMLT Test 
Evaluation Trainer 

The B61-6,8 Type 5B is a nonnuclear, nonexplosive 
unit with functional WR components and electrical system. 
One of the two Type 5B units .scheduled is a training/cvalu- 
auon unit jointly used by the SNL Military Liaison and 
Quality A.ssurancc Departments. The second Type 5B unit is 
used by the DOE for pilot production and quality assurance 
evaluations at the DOE production plant. The WR compo- 
nenLs arc also used to evaluate the System Test Equipment 
(STE) associated with the NMLT and SLT programs. 

The Type 5B is WR with the following exceptions: 

a. The primary and secondary are nonnuclear, noncx- 
plosivc mockup assemblies with bridgewires representing 
detonators and actuators. __ ___— 


c. The ga^cficrator, spin rcxrkci, and MCjaflJO Driver"' 
arc noncx plosive, bridgewire devices. 

d. The parachute is a mass mockup trainer. 



Joint Test Assemblies (JTA) 

Seven JTA versions arc def^ned for the B61 -6,8 NMFT 
and SFT programs, as follows: 

JTAl — This configuration is used for tests of the 
frccfall air (FFA) delivery option and docs not contain IHE. 

— This configuration is used for tests of the 
retarded ground (laydown) delivery option and contains live 
IHE, mock Canned Subassembly (CS A), and a dummy radar 
nose. 

JTA3 This configuration is used for tc.sts of the 
retarded air (REA) delivery option. 

jTA4 ~ This configuration is used for tc.sts of the 
retarded ground (laydown) delivery option and docs not 
contain IHEbuldocsconuiina WRCSAand Acorn assembly. 
A dummy nose is provided. 

JTA6 — This configuration is used for tests of the 
retarded ground (laydown) delivery option and contains nxxrk 
IHE, mock eSA, and WR detonators whose performance is 
measured. 

JTA7 — This mnliguraiion is used for tests of the 
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Table 3 

B61-6,8 JTA Configuration Definition 


Weapon Componcnis 

^ Radar Nose 

Nur3r>Jir5;r./;pnf|nnf ~ 

■*4^ L' 


JTA Components 

I>cionaior Monitor 


JTAl 

JTA2 

JTA3 

JTA4 

JTA6 

JTA7 

JTA8 

FFA 

REG 

REA 

REQ 

BEQ 

REG 

REA 

WR 

MU 

WR 

MU 

MU 

MU 

WR 

MU 

MU 

MU 

WR 

MU 

MU 

MU 

MU 

WR 

MU 

MU 

MU 

MU 

MU 

WR 

WR* 

WR 

WR 

WR 

WR 

WR 

JT 


JT 

JT 

JT 

JT 

JT 

•s)- 

JT 

— 

— 

— 

— 

— 




“Main detonators not fired on JTA2: special sugar loaded detonator assembly connected to firing set. 


WR = War Reserve 

MU = Mockup with WR electrical loading, as applicable 
JT = Special JTA version 



^ JTA8 — This configurauon is used to test the contact 
fuze capability in the radar nose. The JTA8 is delivered in the 
retarded air delivery option with backup fuzing selected. The 
JTA8 is similar to a JTA3 except the radar portion of the nose 
is allowed to function at its selected altitude but is prevented 
from firing the JTA. The unit will fire by the contact fuzes in 
the radar nose or, if the impact docs not give adequate voltage 
output from the contact crystal, by the backup timer output 
from the MC4138 Programmer. 

For each version, maximum use is made of nonnuclear 
WR componcnis with special attention paid to minimizing 
perturbation of the WR .system. The JTA instrumentation is 
common to all versions. The configuration differences be¬ 
tween the seven versions arc shown in the table above. 


I 


B61-6,8 JTA Instrumentation 

The B61 -6,8 JTA Instrumentation may be categorized 
into passive recording of end event functions, of aircraft 
interface functions, tmd of other diagnostic functions. Non¬ 
volatile memory in the flight recorder is interrogated as a post- 
test activity, and provides 62 data channels of information. 
End event monitored data includes detonator function, deto¬ 
nator timing, neutron levels, and neutron pulse liming. A 
means of monitoring gas transfer is part of the JT A instrumen¬ 
tation, but pres ent p la nning docs not now in c lude gas tr a nsfer 
as a J TA event jjj | 
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8. Ancillary Equipment 


Mosi B6I -6.8 ancillary equipment (training, lest, and 
handling equipment) is used on previous Mods of the B61. 
Any new ormodiHcd pieces of ancillary cquipmcntncccssary 
lor B61-6,8 operations will he determined by a Joint Task 
Group (JTG) to he scheduled. 

Shipping and Storage 

H1125/H1242yH1012 

The HI 125 Bomb Cradle, either singly or slacked a 
maximum of two high with the HI 242 Swivel Caster Set, or 
its aliemaic, the H1012 Hand Truck, is used for transportation 
and storage of the B61-6.8. These are carryover items that are 
micrchangcablc between the various B61 Mods. 

H1127 Storage Bag 

The HI 127 is used on each B61-6,8 to store one-for- 
onc items shipped with the weapon. 

Field Test and Handling Equipment 

Field test and handling equipment is authorized as re¬ 
quired for B61 -6.8 safely operations, bomb subassembly and 
assembly, monitoring, PAL control and training, limited-life 
component exchange (LLCE) and maintenance. Equipment 
previously developed for existing B61 Mods will be used 
wherever possible; new- equipment will be designed only 
where necessary. 

Safety Operations 

The following carryover equipment will be authorized 
for u.se with the B61-6,8. 

T290A Sampler, Air 

The T290A is used to detect tritium in the air and 
measure the level of concentration. ThcT290A is an allcmaic 
for the T446 Tritium Alarm Monitor when used as a portable 
monitor. 

T446 Alarm Monitor, Tritium 

The T446 is used to detect tritium in the air and 
measure the level of concentration. It may be powered by the 
T207I Power Supply. The T446 is an alternate for the T290A 
Air Sampler. 

T464 Charger, Battery 

The T464 can be used to operate the T446 Tritium 
Alarm Monitor from 115-V ac power while charging, or 
maintaining a charge on, die ballcrics in the T446. It will 


operate the T446 only wdth batteries installed. The T2071 
Power Supply must be used with the T446 when baucrics arc 
not installed. 

T2071 Power Supply 

The T2071 allows direct and continuous use of the 
T446 Tritium Alarm Monitor from 115-V ac power lines. 

Limited Life Component Exchange 
Equipment 

The following carryover DOE-designed equipment is 
required to perform the planned LLCE, including w'capon 
leak testing. New, additional equipment will be deOned only 
if necessary. 

H631 Handling Tool, Caster 

The H631 is used to facilitate turning casters on 
the H1012 Hand Truck or H1242 Swivel Caster Set. !l is an 
allcmaic for the HI216. 

H869 Strap, Hoisting 

The H869 adapts the rear bomb subas.scmbly to over¬ 
head handling equipment. It is used during parachute replace¬ 
ment or if the subassembly is removed for further access into 
the preflighi and center bomb subassemblies. 

HI004 Adapter, Hoisting, Bomb 

The Hl(X)4 adapts the bomb to an overhead hoist or 
fork lift using bomb lugs as points of attachment. It is used to 
transfer the bomb from the HI 125 Bomb Cradle to other 
equipment. 

H1011 Socket Set, Socket Wrench 

The H1011 is used to loosen and lighten electrical 
connector retaining nuLs. 

H1082 Pump and Control Box, 

Hydraulic 

The H1082 is used with the H1134 Hydraulic Ram and 
the HI 135 Ram Restraining Frame to apply pressure to the 
cover plate during removal and installation of the threaded 
ring in the center bomb subassembly. 

H1130 Handling Device, Bomb Tail 

The HI 130 aiiachos to the tail bomb subassembly to 
provide for manual lifting. It is used during parachute 
replacement and removal to gain further access to the interior 
of the weapon. 
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H1134 Ram, Hydraulic 

The 111 1.14 i.s ii.scd with ihc H1()K2 llyilraiilic Pump 
aiul ('omnil Box and Uic Ill 135 Ram Rcslraining F'ramc to 
apply pressure to die cover plaic lor disassemhly and reassem¬ 
bly ol die center bomb subassembly. 

H1135 Frame, Restraining, Ram 

I hc 111135 is used with the H1134 Hydraulic Ram and 
H1()S2 Hydraulic Pump and Control Box to apply pressure lo 
the cover plate during removal and installation of the threaded 
ring securing the cover plate. 

H1136 Handling Device 

The HI 136 aitiichcs to the cover plate of the center 
bomb subassembly and provides a means for manual removal 
and installation. 

H1176 Wrench, Spanner 

The H1176 is used to remove and install the dircadcd 
ring which secures the cover plate in the center bomb subas¬ 
sembly. 

H1199 Wrench, Torque 

The H11 is u.scd to remove and install nuts securing 

connectors of flat electrical cables to the ECA. 

HI 200 Wrench, Open End 

The H1200 may be required to hold the hex studs while 
the nuts arc being removed from the flat electrical connectors 
with the HI 199 Torque Wrench. 

HI 201 Removal Tool, Electrical 

The HI201 is u.scd to disconnect the flat electrical 
connectors from the ECA. 

HI216 Tool, Caster 

The H1216 is used to facilitate turning casters of the 
H1012 Hand Truck or H1242 Swivel Caster Set. It is an 
altemaic for the H631 Caster Tool. 


HI 234 Wrench, Torque 

The H1234 is used to lighten or install the studs in the 
MC4139 Junction Box located in the ECA. 

HI238 Platform, Assembly Stand 

The H1238 is used with the H1229 Bomb Stand during 
the replacement of limited life components. It is required at 
all locations except naval ships, and provides a base for the 
HI 229. 

HI 248 Removal Tool, Machine Screw 

The H1248 is required to loosen screws securing ease 
sections together if commercial tools fail to loo,scn screws. It 
is an alternate for the HI354 Screw Removal Tool. 

HI354 Screw Removal Tool 

The H1354 is required to loosen the screws securing 
case .sections together if commercial tools fail to loosen the 
screws. IiisanallcmalcforH1248 Machine Screw Removal 
Tool. 

H1379A Tool, Handling 

The H1379A will be used for removal and installation 
of the ECA. 

HI 493 Wrench 

The H1493 wdl be used to torque the gland into the 
Acorn and 2M assemblies. 

T304C Test Set, Continuity, Multiple 
Purpose 

The T304C is used to check electrical continuity. 
When connected to the umbilical connector of the B61-6.8, 
through the CTl 520cable, the T304C will verify the status of 
the MC2969 Intent Stronglink Switch. When used with the 
CTl505 cable through the J1 connector on the MC4136 
Prcflight Controller, the T304C will indicate the PAL status 
(lock/unlock). 


H1228C Protector Kit, Electrical 
Connector 

The H1228C contains the connector covers and short¬ 
ing plugs required when any electrical disconnection is made 
during maintenance operations. 

HI 229 Stand, Bomb 

The H1229 is u,sed to rotate and secure the center bomb 
.subassembly in a vertical position while components arc 
being replaced. This suintl is for use on board naval aircraft 
carriers. It isitscd with the H1238 Assembly Platform at other 
l(x:aiions. 


T461 Panel, Leak Detection 

The T461 is used wilh ihc T489 or T46() Leak Dcicc- 
lion Chambers lo check the seal inicgriiy of ihc ccnicr bomb 
subassembly case. 

T489 Chamber, Leak Detection 

ThcT489 is used with ihcT46l Leak Dcicclion Panel 
lo chexk ihc seal inicgriiy of ihc ccnicr bomb suba.sscmhly 
after rcplaccmcni of limited life componcnis in ilic B6l-6,8. 
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Operational Capability 

In addition to the hiniktl lilc com|X)nccU exchange 
ciiuipincni listed alx)vc. tlic Inlhiwing carryover equipment 
will Iv ;milmri/cd for use with the 1361 -6,H, as necessary, for 
inainieniincc including replacement of pantchuics. 

H563 Sling, Beam Type 

The 11563 attaches to the Iramc of the HI 125 Bomb 
Cradle for hoisting with overhead handling equipment. 

H587 Sling, Atomic Weapon Trailer 

The H587.may be u.scd as an alternate to the H563 
Beam Type Sling for overhead handling of the bomb in the 
HI 125 Bomb Cradle. Two shackles, P/N 870731-00. arc 
required when using the H587. 

H1012 Truck, Hand 

The H1012 is an alternate for the H1242 S wi vcl Caster 
Set. 

H1170 Socket, Socket Wrench 

The HI 170 is used to remove and install the gas 
generator during replacement of components in the tail bomb 
subassembly. 

H1172 Installing-Removal Tool, 

Parachute 

The H1172 is used to lift and guide the aft end of the 
parachute to its proper position during installation. 

H1173 Handling Tool 

Two H1173s arc inserted through holes in the aft end 
of the tail bomb subassembly and intoa plate on the parachute 
to aid in pulling and locating the parachute during its instal¬ 
lation. 

H1195 Pliers 

When necessary to install or remove shorting plugs on 
MC1605 Series Battery Cable Assemblies in a T436B Power 
Supply, the HI 195 may be used to disconnect or connect the 
cable assemblies at the junction box without removing the 
batteries from the ease. 

HI 237 Socket, Socket Wrench 

The HI237 is used during maintenance of MC1605 
Series Batteries to remove and install terminal nuts to permit 
cable as.scmbly replacement It is also used to apply the proper 
torque to these nuts and to the nuts securing the battery 
terminal links. 


H1242 Caster Set, Swivel 

The HI242 attaches to the HI125 Bomb Cradle to 
provide mobility for the weapon. It i.s pan of the shipping and 
storage configuration for the WR weapon and is included as 
special equipment if desired for training weapons. 

H1247 Spacer, Case Section 

Two or three H1247s may be used to ensure personnel 
safety during removal and installation of the tail bombsubas- 
scmbly. 

HI 348 Wrench 

The H1348 is used to connector disconnect the pullout 
cable to the B61-6,8. 

T431 Charger-Monitor, Battery 

The T431 is used to monitor the eiccuncal dSndition of 
and to charge the T436 or T436B Power Supply or the 
MCI605 Battery. Ilisanalicmatc forthcT431A. 

T431A Charger-Monitor, Battery 

The T431A is used to monitor the electrical condition 
of and to charge the T436 or T436B Power Supply or the 
MC1605 Battery. It is an alternate for the T431. 

T436 Power Supply 

The T436 is used as a power supply for the T1535 
Portable Decoder, T1536 Portable Rccodcr, T1539 Portable 
Code Veriner, and T1555 Portable Rccodcr/Vcrincr. The 
T436 is an alternate for the T436B described below for all but 
the T1563- 

T436B Power Supply 

The T436B is u.scd as a power supply for the T1535 
Portable Decoder, T1536 Portable Rccodcr, T1539 Portable 
Code Verifier, T1555 Portable Recodcr/Verifier, and T1563 
Automated PAL Controller. ThcT436B isanaltcmaicfor the 
T436. 



Ti 535 Decoder, Portable 

The T1535 is used with the T436 or T436B Power 
Supply to lock or unlock the B61 -6,8. A CT1 478connccLs the 
T 1 535 to the T436B and a CT 1 495 atlapLs the CT 1478 to the 
T436. The CTl 504 connects the Tl 535 to the B61 -6.8. 


11»J/> / tt <0 
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T1536 Recoder, Portable 

I he 115^6 is used widi ihc '1436 or 'r436B Power 
Supply u> rociHlc or cckIc chock ihc B61-6,8. A CT1478 
connccis ihc '11536 to ihc T436B and a CT1495 adapts ihc 
CT1478 10 ihc 1*436. The CT1504 connccLs the T1 536 lo the 
B6I-6.8. 

T1539 Code Verifier 

The T1539 can be used with ihcT436or T436B Power. 
Supply 10 code check ihc B6l-6,8. A CT1478 connccis ihc 
T1539 10 Ihc T436B and aCT1495 adapts the CT1478 lo the 
T436. The CT 1504 connects ihc T1539 lo the B61 -6,8. Alter¬ 
nate for T1555 Portable Rccodcr/Vcrincr. 


^ 1 


T1542 Adapter, Administrative 


T1549A Decoder Programmer 

The T1549A is used lo perform a funciional lest of the 
T1535 and can he used as a simulated coded switch to permit 
training in use of the T1535. 

T1555 Recoder/Verifier, Portable 

The T1555 is used with the T436 or T436B Power 
Supply to code check the B61-6,8. A CT1478 connects the 
T1555 to the T436B and a CT1495 adapts the CT1478 to the 
T436. The CT 1504 connects thcTl 555 to the B61 -6.8. When 
used with the T1558 Recode Enable Adapter, ihcT1555 can 
recode the B61-6.8. 

T1557 Adapter, Test 

The T1557 is installed on the electrical connector of the 
T436B Power Supply cover to maintain a discharged power 
supply in the discharged state. 

T1558 Adapter,' Recode Enable 

The T1558 can be used with the T)555 Portable Re- 
codcrA^crificr to permit recoding of the B61-6.8. 

T1563 Controller, Automated, PAL 

The T1563 can be used to recode, lock, unlock, code 
check, anil verify codes in the B61-6,8. 


T1564 Trainer, PAL 

ThcTl564 may be used lor training in performing six- 
digit PAL operations. It simulates the coded switch in the 
bomb. 

T1568 Trainer, PAL 

ThcTl 568 may be used for training in performing si.x- 
and twelve-digit PAL operations. It simulates the coded 
switch in the bomb. 

T1571 Electronic AC/DC Power 
Converter 

ThcTl571 is used to convert 110-V ac 60 Hz to 28-V 
dc. It is an alternate to the T436/T436B for powering the 
T1535.T1536,T1539.T1555.andT1563. 

T1571A Electronic AC/DC Power 
Converter 

TheT1571Aisusedloconvcri 1 l5-230-Vac50/60Hz 
to 28-V dc and 115-230-V ac 400 Hz to 28-V dc. It is an 
alicmaic to theT436/T436B for powering the T1535, T1536. 
T1539, T1555. and TI563. The T1571A isan alternate for the 
T1571. 

T1572 Portable Data Module 

The T1572 is used to carry encrypted data to and from 
command headquarters and the recode detachments. 

TYPE 3A Bomb Maintenance 

The following equipment is required only to per¬ 
form maintenance on B61-6,8 TYPE 3 A Bombs. 

HI 249 Extractor 

The H1249 is used to remove the energy absorber from 
the nose. 

HI 404 Fixture, Lift 

The H1404 is used to permit removal of the support 
sleeve from Type 3A Bombs using overhead handling equip¬ 
ment 
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9. Test and Evaluation 


Nuclear System Tests 



B61 -6,8 System Tests 


Development Test Program 

The B6l-6,8 development test program will provide 
assurance that the system will function properly and safely 
throughout its stockpile life. Four categories of tesLs arc being 
conducted to meet this objective: STS environment, laydown 
shock, flight, and special laboratory tests. Tabic 3 summa¬ 
rizes the B61-6.8 test program. The A, B, and C prefixes of 
the test unit numbers indicate the three phases of the program 
that relate the hardware development progress. Phase A 
employs first prototype hardware; new design major compo¬ 
nents are constructed by Sandia using commercially available 
piece-parts that have not yet been qualified. Phase B hardware 
will be constructed by the DOE manufacturing agency using 
mostly qualified piece-pans. If any design changes arc 
identified by Phase A results, they will be incorporated. Phase 
C hardware is WR-quality material consuncicd during pro¬ 
duction qualification (TMS) activities at the DOE plant. 
About twenty functional AF&Flcsi units willbcas.scmbl(xl in 
addition to many nonfunctional, units designed to collect en¬ 
vironmental data. 


___ ‘\,No tests will be conducted in the 

areas of acoustic, pressure, humidity, precipitation, wind, and 
suspended panicle environments. Bomb ballistic perform¬ 
ance will be monitored and evaluated to ascertain applicabil¬ 
ity of Navy aircraft weapon delivery software. 
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STS Environmental Series Tests 

These tests will demonstrate the B61 -6,8 will function 
reliably aficrcxpcriencing theextremesof mechanical shock, 
vibration, and temperature tabulated or inferred (aircraft 
carriage and flight conditions) in the STS for Stages I to 5. 

The SE (STS environments) test units will verify that 
the B6l-6,8 will survive the environments. In addition, FT 
(night icsi) units beginning with FT4 will be subjected to STS 
environments before being flown. The STS test series will 
verify weapon reliability after handling, storage, iranspona- 
tion. and llighi environments based on worst-case data actu- 
mulaicd via prior B6I development programs. 

Laydown Shock Tests 

The abi 1 iiy of the B61 -6,8 nuclear system and firing .set 
lo survive the severe mechanical shocks of laydown deliver^' 
again.st hard, irregular targets will be vcnficd both in the 
special icsLsand flight tests. Drop tower tests were conducted 
durign the B61-7 program to measure the response of the 
nuclear system and AF&F to impacts with hard, irregular tar¬ 
gets. The B6I-7 test unit was dropped with its longitudinal 
axi.s hori/onial to strike a railroad rail at the weapon primary 
and at the firing set station. Because the B61 -6,8 is identical 
to the B61 -7 at these staiions, the conclusion from these tests, 
coupled with B61-.3/4 testing and analysis, is that no rclca.se 
altitude restrictions arc required in using the B6I -6,8 against 
hard, irregular targets. 

The rocket launcher facility will be used to simulate 
worst-ease slapdown and longitudinal impact conditions with 
the unit at both its maximum and minimum temperatures. 
From the early ic.sis, component response data at the Acorn 
assembly was obtained which will be used in component 
qualification. Additional wor.st-ca.se laydown delivery condi¬ 
tions will be conducted with fully functional AF&F hardware 
aimaximum and minimum icmpcralurcsal the rocket launcher 
facility. 
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Table 4, B61“6,8 Development Test Plan 
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Acom survivabiliLy in simumlaicd laydown 
Bench test of new breadboard components & new tester 
First Sandia Los Alamos Interface Mockiip 
Maximum laydown impact using rocket launcher, Acom 
Maximum laydown impact using rocket launcher, Acom 
STS shock, vibration with fully functionaJ AF&F 
Time of shock arrival at neutron generator location 
Second Sandia Los Alamos Interface Mockup 
Sandia Los Alamos Interface Mockup, “WR” foam 
One-year Accelerated Aging Unit for material comp. 
Resultant salt air environment inside tail & prcflight 
“Intent*enabled”TSSG aircraft compatibility test unit 
Bench lest followed by bomb configuration test of JTA 
STS test series followed by max. lateral impact with JTA 
STS + max. lateral impact at min. tempcraiure (WR) 

STS + max. lateral impact at max. temperature (WR) 

STS + max. axial impact at min. temperature, Acom sur\*. 

STS + max. axial impact at max. temperature, Acom siir\'. 

A-4,JTA-6 

A.7E, WR,REG 

A/F.l8,JTA-8 

A'6, JTA-3 preceeded by STS environments 
F/A-18, JTA-7 preceeded by STS environments 
A-7E, WR, REG proceeded by STS environments 
B-1B, JTA-2 preceeded by STS environments 
F/A-18, REG, WR preccedal by STS environments 
B'52H CSRL, JTA-8, proceeded by STS environments 
F/A-18, JTA-1 preceeded by STS environments 
F/A-18, JTA-6 preceeded by STS environments 
F/A-18, Design Demoastration Test preceeded by STS 
Neutron Generator “proof lest" 

Hydrostatic pressure capability of center ease 
Nuclear safely certification unit (combined cnv.) 
Electro-static Discharge (reliability) + nuc. cert, unit 
Command disable effectiveness 
Command disable bench tests (multiple), MU loads 
EMR evaluation 

STS_+max. lateral imoa cL laic dcyclDDmcni CQmt)oncnn 

j::z_^_■' 

^ET-5C trainer forPaniex (WR) 

ET-5D trainer for Pantex (JTA) 

Type 3,3A, 3E Training unit evaluations 


Test Idem QkIc; 

LS = Lab Simulated laydown .shock MAT = Material Compatibility 

ES = Electrical System CTU = Compatibility Test Unit 

SLIM = Sandia Los Alamos Interlace Mockup ECT = Electrical Compatibility Test 
SE = STS Environments (.shock, vih., thermal) ET = Flight Test 
ND = Nuclear Development NS = Nuclear Safety 


UC = Use Control 
EM = Eilcctromag. Rail. 
TR = Trainer evaluation 
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Flight Tests 

The flight icsi proeraiTi will consist oi* approxinuucly 
12 air drops. T.ighi are mnv planned io lx* lovv-alhiude 
laydow n deliveries. Hccausc* w orsi-citscslapdown slUK'ksaro 
produced at minimum release velocities, the tests arc cnnccn- 
iraicd in that area. Two llight tests will he rcuirded airhurst 
andtwofrccfallairbursi. Alldaiacollcciion on these tests will 
util i/e the JTA sy.stem in development. Some flight tests w ill 
he conducted without any instrumentation on Ixiard locsuih- 
lish the WR/JTA equivalence. 

Special Tests 

In addition to the tests discussed above, special pur¬ 
pose tesLS will be performed to obtain information on pariicu- 
Uir elements of B61 -6,8 design and performance. Component 
response to aircraft vibration was mc.asurcd during the B61 - 
3,4 and B61-7 development programs in the Vibration 
Ryaround (VFA) tc.sis. It ha.s been determined duit the F-'B- 
111A produces the most severe in-flighi vibration environ¬ 
ment and these levels wd 11 be used in the STS cn vironnicru pre¬ 
conditioning for the B61-6.8. Only if the new .Navy A12 
aircraft is available, will it be ncccs.sary to add B61 b,S VFA 
icsLs. Similarly, mechanical shock produced by aircraft 
ejection from present Navy bomb racks has pres loiislv been 
dcicrmincd- 


Electromagnetic Radiation (EMR) 

Tests to investigate the F.MR environment as defined 
in the STS w ill be conducted. Previous test results on B61 -3.4 
and B61-7 were used as appropriate to establish areas of 
concern for the B61 -6.8. No new' areas of concern arc now 
identified except the FMR specification has chtingcd in the 
new STS and the rc.spon.se of the B61 -6.8 will he detcmiincd. 

Compatibility 

Three Sandia/Los Alamos Intcnacc Moekup (SLIM) 
units, representing succeeding stages of hardw'jirc develop¬ 
ment, will be u.scd loconfiim the mechanical compatibility of 
Sandia and Los Alamos components. I'hc compatibility of 
matcrial.suscd in the center bomb suba.sscmbly will bcsiudicd 
in an accelerated aging unit. Prcliminar\- aircralicompaiibil- 
iiy checks will be made prior to all llight tests, with particular 
emphasis on a.s.suring the reliable performance of the new 
intent-enabled MC4137TSSG. Tests will also tH; 4 Krformcd 
by Sandia and by Los Alamos to confirm adequate standoff 
distance and the proper functioning of the generators in the 
extreme electrical and mechanical environments at w'capon 
detonation. 

Detailed inftiimaiion on each of the tests conducted in 
the B6I -6.8 development program w ill K' available in Bomb 
Btxiks on file at SNL and .summary ic.st reports. 


73 



\ I K )PI £T) 












hli^LX 





Inicnlionally Left Blank 



I Ik JnI tv<:<i]r/cnn 














10. Programming 


Since liic B6I '6,S is a faciory rclrofit of the cxisung 
I ).2,5 sUKkpilc, ihc nonnal early program suppon liirough 
Pha'ic I and Phase 2 studies involving both nuclear laborato¬ 
ries arc not appropriate. The chan below lists the significant 
development and production milestones to be accomplished. 


B61-6/8 PROGRAM SCHEDULE 

DOD-DOE/SNLA MAJOR MILESTONES 
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APPENDIX A 

Military Characteristics for the B61-6,8 
(Proposed) 























Military Characteristics 


Comments 



» 'll * n'fu'rttl 

I • U I kO) / urfyose: Ihi.s jxiriion oi ihc Military C'harat - 
u risiKs (MC s) s(x:cilics (lie rcquia-mctiLs ol ihc Dcparinicnt 
nl I 1 DOD) lo ihc Dcparuiicm of Energy (DOE) for liic 
l'.M Muds r, and X (061-6.8) gravity bombs. The mo<linca- 
tions are to incorrKKaic tnoclcm safely, .security, and opera- 
lumal leaturcs. Ilic 061 - 6 . 8 dcsigtis .shall have ihc features 
delineated in (taragraph 2 of iJic.se MCs. 

II I B61 Mod 6 is a mrKlification of the B 6 I Mtxl 0. 

1 I. 2(li) Ihc 061 Mod 8 isa miKlificaiionof the B 6 I Mods 

2 and .>. 

I._ (l.d Continf^cncies: The design, development, lest and 
evaluation ol die bombs will be cixirdinaicd by the B 6 I 
Project Olficcrs Group (POG). Should ii appear impraciicai 
to meet any ol these characteristics or that meeting them will 
unduly delay development or production of the bombs, incur 
unrea.sonahlc costs, or require excessive special nuclear 
materials, prompt noiincation shall be made by the Lead 
Project Ol lit er (LPO) via .service channels to the Nuclear 
WeaiKins Ct.mncil Suinding Committee (NWCSC). 

I ..1 iVn'imifwimf’ CtuirarAcrisiks: In die event that compli¬ 
ance with ihe.se MCs results in design conflict, priorities shall 
I'K.' observed in the order listed below, giving considcradon to 
iradeolls vOiich allow higher priority MCs to be attained 
i^hilc minimising the degradation of the competing lower 
priority .MCs. Operational effectiveness, technical feasibil¬ 
ity. .schedule, and cost will provide the basis for making 
tradeolfsaiiiong the desired competing charactcri.siics. Tradc- 
olls may K.‘ made with die guidance and approval of the B 6 I 
P(X;. Hie NVV'CSC must approve all MC changes. 

I ..VI ((ii Nuclear Safety 

l ..^.2 (U) Minimum Inu’insic Radiation 

1.3.3 (U) Reliability 

1.3.4 (U) Physical Characteristics 

1.3.3 (U) Yield 

1.3.6 (U) Radioactive Material Di.spcr.sal 

1.3.7 (U) HE Safety 

1.3.8 (U) Economical Use of Nuclear Material 

1.3.9 (LI) Operational Simplicity 

1.3.1 0 (U) Command and Control Features 

1.3.1 1 (U) Maintenance 

2. (U) Bondi Characteristics 

2.1 (U) General Considerations: 

2.1.1 (U) The bombs .shall not require functional testing in the 
stockpile. 


2. 1 .2 (U) The bombs shall be designed so that the likelihood 
of plutonium dispersal in an accident environment is mini¬ 
mized — ■ -—- 
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__ Mititary Characteristics _ 

- 1 J I i 1 1’rovision shall he made lor easy removal ol some 
s umiM .oem ol (he oIccLncal system vital to the I unction of the 
I'omhs riiis provision shall not compromise Service opera¬ 
tional rei)iiircn»cnis or storage criicria. Since this feature is a 
iisc-tonirol fonciion only, the homh must meet all nucletir 
'lalciy requirements in paragraph 2.8 whether the separable 
com(H)neni is in.stiilled or removed. 

2.1.3 (Li) The design of the bomb .shall be comsistcni with the 
cnvironmenuil conditions dclineatctl in the siockpilc-to-Tar- 
get Sequence (STS) and shall bo deliverable in accordance 
with aircraft profiles in the STS. 

« 2 n il Om'rntmnnl --- 


Comments 




i • 

f J 


r-i 
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'bolb 

h{3) 


I 

U 

2.3.3 (U) Groundbursi (Frcefall) 

2.3.4 (U) Laydown: (Retarded delayed groundburst.) The 
firing times .sha ll be the same as the parent bomb. 

r ' 

2.3.6 (U) The bombs shall be capable of functioning properly 
in water depth to the limits of the Laydown timers. 

2.4 (U) Physical Characieristics: 

2.4.1 (U) Weight: 770 pounds (nominal) 

2.4.2 (U) The length shall be 141.6 inches maximum. 

2.4.3 (U) The body diameter shall be 13.3 inches maximum. 

2.4.4 (U) The shape and geometry of the bombs shall be such 
as to minimira drag and adverse flight characteristics on the 
strike aircraft during all phases of the flight profile. 

2.4.5 (LI) War reserve bombs shall be identified with perma¬ 
nent and distinctive markings. 







































__ Military Characteristics 

. *' »l M Atrt raff ( ftmpdtihiliis 

- I (I i I he [x)inl>s sluill (v capable of carriage (suiglc aiul 
nuihiplci arul release umler ()|vraiional condiiions Irom Uic 
loIli>wing carriers wuhoui aircrali mcxiificaiion: 

CARRIAGP 
Single Exicmal 
Multiple Exicmal 
Multiple Exicmal 
Multiple External 
Multiple 

^.5.2 (U) The bombs shall he* compatible with aircraft both 
widi and without a Unique Signal Generator (USG) capabil- 

^6 (U) Relinhitiry Characteristics: _^ 


1 

i 

1 


AIRCRAI-T 

A-4M 

A-6i;.c: 

I'/A-ISA.C 

A-7r. 

A-12 


Comments 


17 (U) En vtronmenitil Charaaemttes: ..' 

2.^.1 (I/) The bombs shall ^•Ulin lull opcraiional capabiluy 
iliiring and alter exposure to the normal environmental con¬ 
ditions specilicd in the S TS. 

-.7.t (U) After exposure to abnormal environments specified 

in the STS. the bombs are not expected to retain full opera¬ 
tional reliability, but should still maintain the .standards of 
stileiy set fonh in thc.se MC’s. 

2.S (U) Safety Characteristics 

2.S. 1 (U) The requirements outlined in this .section should be 
considered minimal. Tlicy arc not intended to restrict the 
designer m the advancement of nuclear safely. 

2.5.2 (U) There shall he no irreversible functioning of any 
enabling or arm ing component poor to release of a bomb from 
an aircraft. 

2.8.3 (U) In the event of a detonation initiated at any one point 

in the bombprimiu 7 high explosive, the probability of achiev- 
ing a nuclear yield greater than the energy equivalent to that 
produced by detonation of four pounds of trinitrotoluene 
(TNT) shall not e xceed one in one mill ion (1 x IQ-*). _ 
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Military Characteristics 


fi 


-.•''.5 (IJ) I he probability (|kt bomb lilciiinc) of a preiiiaiiiiv 
nuclear ilctonaiion of a Nmib for the normal environments 
ilcscrilKd in the STS shall not exceed: 

2.H.5 .1 (U) Prior lo prearm (which includes applicaiion of the 
amimj; power and the unique intent enabling stimulus) and 
prior to release from the aircraft and in the absence of die 
trajectory stimulus. I x 10’. 

2.8.5.2 (U) After prearm and prior to release from the aircraft, 
and in the absence of trajectory stimulus, 1x10*. 

2.8.5..3 (U) After prearm and after release from the aircraft, 
and in the absence of trajectory stimulus, 1 x 10’). 

2.8.6 (U) The probability (per occurrence) of a premature 
nuclear detonation in the normal relcascenvclope after receipt 
of the trajectory stimulus shall not exceed: 

2.8.6.1 (U) Prior to expiration of the safe separation time 
1 X I0\ 

2.8.6.2 (U) After expiration of the safe separation time and 
prior to the intended detonation. 1 x 10 ’. 

2.HJ (U) The probability (per occurrence) of a nuclear deto¬ 
nation of a bomb for individual or credible combinations of 

abnormal environments spcci fied in the STS shall not exceed: 

2.8.7.1 (U) In the absence of any unique intent and traicctorv 
•stimuli, 1x10*. 

2.8.7.2 (U) After receipt of the unique intent and in the 
absence of the trajectory stimiiliis 1 x in > 


Comments 


TO O /I I 


2^^8.9 (U) For the B61 -6.8 it shall be possible to monitor the' 
.safe .status of a bomb electrically in any STS configuration It 
shall be possible to electrically safe the bomb at any point in 
the STS prior to release from the aircraft. Both of these re¬ 
quirements apply to normal environments only. 

2.8.10 (U) The initiation of the bomb arming sequence shall 
require both AMAC power at the time of weapon release and 
bomb separation from the delivery aircraft. 

2.8.11 (U) Monitor circuits in a bomb which arc associated 
with the in-fiight monitor and control functions shall be 
adaptable to in-flight monitorand control systems employing 
monitor power limited to a value less than that which would 
activate any bomb components considered critical from a 
safety standpoint. 

2.8.12 (U) The bomb shall be designed to facilitate Render 
Safe Procedures (RSP) which return the weapon to a condi- 
tionthaiisassafcasrcasonablyachicvable. The bomb design, 

RSP, and EOD operations should allow the bomb to be 
shipped with a minimum of .special .storage and movement 
constraints. 

2.8.13 (U) The design shall: 

2.8.13.1 (U) Minimixe radiological, chemical toxicity, or 
other hazards during maintenance, handling, and other opera- 


Wi) 
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Comments 



_ Military Characteristic s 

lions in nonnnl environ men is. K;k1u')ouk:iI hn/arcls should 
Ix' as low as reasonahK achicvahle whon a IxHuh is suhjeeicd 
10 ahnorrnal environmcnis. 

2.S.I V2 (U) Li se msens uivc hieh cxplosivc.s (. 


2.8.15 (U) If any energy storage componenLs arc included 
within a bomb that arc capable of prearming or arming the 
bomb (other than primary power sourcc.s), they shall dis¬ 
charge if energy input is inierrupicd. The time required for 
discharge to a safe level shall bo the minimum lime practi¬ 
cable after removal of arming power. 

2.8.16 (U) Bomb arrays shall remain subc riiical m all planned 
logistical and operational cimliguraiions and uiuier .single or 
credible combinations ofabnormalcnvironmenis as spc'cificd 
in the STS. 

2.9 (U) Comnuind and Conind CharacAensties: 

2.9.1 (U)Pcrmi.ssivc Action Link iPAL): The B61-6.8shall 
incorporate CAT D PAL in accordance with the general 
characicri.siics outlined in die OSD letter.^ 

2.9.2 (U) Command Disablcmeni iCD): 

2.9.2.1 (U) Nonviolent Command Disablement systems for 
the B6I-6, 8 shall be dc.signed in accordance wuih the OSD 
letter^ A command disabled bomb shall be safely transport¬ 
able through normal nuclear w'capon supply channels. 

2.9.2.2 (U) The disablement system designs and assc.ssmcni 
of effectiveness shall be in accordance with the intent of the 
OSD policy letter.’ 

2.9.2.3 (U) The bomb sy.sicm .shall provide for manual inser¬ 
tion of a three-digit code on the bomb prcflighi panel in 
preparation for di.sablcmcni. The preparation for disable¬ 
ment shall be reversible. 

2.9.2.4 (U) Disablement .shall be accomplished by an action 
which is separate and distinct from the action for preparation 
for disabIcmcnL 

2.9.2.3 (U) Disablement shall not require PAL codes or PAL 
code equipment. 

2.9.2.6 (U)ThcCD .systems shall he capabicof operation with 
the PAL in any rntxlc or state. 

2.9.2.7 (U) A capability to visually and laclilcly dcicnninc the 
status (di.sabicd or not disabled) shall lx; provided. 
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Milit3ry ChsrsctGristics 


Comments 


2 9.2.9 (U) Under normal environmental conditions, the 
probability of accidental disablement due to the CD system in 
the absence of any input stimuli except for normal sumuli 
(c.g.. Category D PAL recoding, decoding, and status checks) 

shall not exceed: 

2.9.2.9.1 (U) 1 X 10 ‘^ per bomb year (with 1 x 10 per weapon 
lifciime desired) prior to preparation for CD. 

2 9.2.9.2 (U) 1x10^ after preparation for CD but pnor to the 



activate stimuli. 



<2.10 (U) Mauimma, Mmimnng.Tr^ortabiUiy, Stor¬ 
age. and Handling Equipment Characteristics: - , - 


2.10.1 (IT) Consistent with paragraphs 1.3. 2.1.3. and 2.6.2. 
Limited Life Component Exchanges (LLCE) and 
maintenance shall be minimized. Provisions shall be made 
for simple replacement and caseof access with a minimum of 


downtime during LLCE. 


2.10.2 (U) Maintenance procedures and DOE-supplied sup¬ 
port equipment shall be funcuonally and physically compat¬ 
ible with existing maintenance procedures and equipment 
insofar as practicable. 

2.10.3 (U) Preplanned, scheduled, or periodic maintenance 
(excluding PAL) shall be minimized in the stockpile. 

■> 10 4 (U) DOE-supplied support material and equipment to 
'be used with these bombs shall be capable of withstanding the 
same STS environmental conditions required of the bombs in 

areas where they arc to be used together. • , . 

2.10.5 (U) DOE-supplied .shipping and storage matenal shall 
be compatible with military tran.sporiation systerns imd han¬ 
dling and storage procedures as described in the STS. 



’(U) Office 

actcristics . -.. 

N-..lcar Warheads” dated 18 April 1980. 
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